Siemens SCALANCE XF-200BA User manual

SIMATIC NET
Industrial Ethernet switches
SCALANCE XF-200BA
Operating Instructions
02/2023
C79000-G8976-C470-08
Introduction
Safety notices 1
Recommendations on
network security 2
Description of the device 3
Installation and removal 4
Connecting up 5
Maintenance and cleaning 6
Error correction 7
Technical speci󹪝cations 8
Dimension drawings 9
Approvals A

Legal information
Warning notice system
This manual contains notices you have to observe in order to ensure your personal safety, as well as to prevent
damage to property. The notices referring to your personal safety are highlighted in the manual by a safety alert
symbol, notices referring only to property damage have no safety alert symbol. These notices shown below are
graded according to the degree of danger.
DANGER
indicates that death or severe personal injury will result if proper precautions are not taken.
WARNING
indicates that death or severe personal injury may result if proper precautions are not taken.
CAUTION
indicates that minor personal injury can result if proper precautions are not taken.
NOTICE
indicates that property damage can result if proper precautions are not taken.
If more than one degree of danger is present, the warning notice representing the highest degree of danger will
be used. A notice warning of injury to persons with a safety alert symbol may also include a warning relating to
property damage.
Quali󹪝ed Personnel
The product/system described in this documentation may be operated only by personnel quali󹪝ed for the speci󹪝c
task in accordance with the relevant documentation, in particular its warning notices and safety instructions.
Quali󹪝ed personnel are those who, based on their training and experience, are capable of identifying risks and
avoiding potential hazards when working with these products/systems.
Proper use of Siemens products
Note the following:
WARNING
Siemens products may only be used for the applications described in the catalog and in the relevant technical
documentation. If products and components from other manufacturers are used, these must be recommended or
approved by Siemens. Proper transport, storage, installation, assembly, commissioning, operation and maintenance
are required to ensure that the products operate safely and without any problems. The permissible ambient
conditions must be complied with. The information in the relevant documentation must be observed.
Trademarks
All names identi󹪝ed by ® are registered trademarks of SiemensAG. The remaining trademarks in this publication
may be trademarks whose use by third parties for their own purposes could violate the rights of the owner.
Disclaimer of Liability
We have reviewed the contents of this publication to ensure consistency with the hardware and software
described. Since variance cannot be precluded entirely, we cannot guarantee full consistency. However, the
information in this publication is reviewed regularly and any necessary corrections are included in subsequent
editions.
Siemens AG
Digital Industries
Postfach 48 48
90026 NÜRNBERG
GERMANY
C79000-G8976-C470-08
Ⓟ 02/2023 Subject to change
Copyright © SiemensAG 2017 - 2023.
All rights reserved

Introduction
Purpose of the Operating Instructions
These operating instructions support you when installing and connecting up devices of the
SCALANCE XF-200BA product group.
The con󹪝guration and the integration of the devices in a network are not described in these
operating instructions.
Validity of the Operating Instructions
These operating instructions apply to the following devices:
• SCALANCE XF204-2BA
• SCALANCE XF204-2BA DNA
Unless mentioned otherwise, the descriptions in these operating instructions refer to all
devices of the SCALANCE XF-200BA product group named in the section on validity.
Designations used
Classi󹪝cation Description Terms used
Product line The product line includes all devices and variants of all product groups.
If information applies to all product groups within the product line, the term
SCALANCE X-200 is used.
SCALANCE X-200
Product group If information applies to all devices and variants of a product group, the term
SCALANCE XF-200BA is used.
SCALANCE XF-200BA
Device If information relates to a speci󹪝c device, the device name is used. e.g. SCALANCE XF204-2BA
Additional documentation
In addition, note the Operating Instructions of the SIMATIC BusAdapter.
You will 󹪝nd the supplementary documentation here:
• On the data medium that is supplied with some products:
– Product CD/product DVD
– SIMATIC NET Manual Collection
• On the Internet pages of Siemens Industry Online Support:
– SCALANCE BusAdapter (https://support.industry.siemens.com/cs/ww/en/ps/25085/man)
– SIMATIC BusAdapter (https://support.industry.siemens.com/cs/ww/en/ps/14072/man)
SCALANCE XF-200BA
Operating Instructions, 02/2023, C79000-G8976-C470-08 3

Documentation on con󹪝guration
You will 󹪝nd detailed information on con󹪝guring the devices in the following con󹪝guration
manuals:
• SCALANCE XB-200/XC-200/XF-200BA/XF-200G/XP-200/XR-300WG Web Based Management
• SCALANCE XB-200/XC-200/XF-200BA/XF-200G/XP-200/XR-300WG Command Line Interface
You will 󹪝nd the con󹪝guration manuals here:
• on the data medium that ships with some products:
– Product CD / product DVD
– SIMATIC NET Manual Collection
• On the Internet pages of Siemens Industry Online Support (https://
support.industry.siemens.com/cs/ww/en/ps/15291/man).
Further documentation
System manuals for SIMATIC NET products
In the system manuals "Industrial Ethernet / PROFINET Industrial Ethernet" and "Industrial
Ethernet / PROFINET passive network components", you will 󹪝nd information on other
SIMATIC NET products that you can operate along with the devices of this product line in
an Industrial Ethernet network.
There, you will 󹪝nd among other things optical performance data of the communications
partners that you require for the installation.
You will 󹪝nd the system manuals here:
• On the data medium that ships with some products:
– Product CD / product DVD
– SIMATIC NET Manual Collection
• On the Internet pages of Siemens Industry Online Support under the following entry IDs:
– Industrial Ethernet / PROFINET Industrial Ethernet System Manual (https://
support.industry.siemens.com/cs/ww/en/view/27069465)
– Industrial Ethernet / PROFINET Passive Network Components System Manual (https://
support.industry.siemens.com/cs/ww/en/view/84922825)
Manual Collection "Distributed I/O System ET 200SP"
In the reference manual for the scalable IO system ET 200SP you will 󹪝nd more information
on the bus adapters.
You will 󹪝nd the reference manual on the Internet pages of Siemens Industry Online Support:
• SIMATIC ET 200SP Manual Collection (https://support.industry.siemens.com/cs/ww/en/view/
84133942)
Introduction
SCALANCE XF-200BA
4Operating Instructions, 02/2023, C79000-G8976-C470-08

SIMATIC NET manuals
You will 󹪝nd the SIMATIC NET manuals here:
• On the data medium that ships with some products:
– Product CD / product DVD
– SIMATIC NET Manual Collection
• On the Internet pages of Siemens Industry Online Support (https://
support.industry.siemens.com/cs/ww/en/ps/15247).
SIMATIC NET glossary
Explanations of many of the specialist terms used in this documentation can be found in the
SIMATIC NET glossary.
You will 󹪝nd the SIMATIC NET glossary here:
• SIMATIC NET Manual Collection or product DVD
The DVD ships with certain SIMATIC NET products.
• On the Internet under the following address:
50305045 (https://support.industry.siemens.com/cs/ww/en/view/50305045)
Security information
Siemens provides products and solutions with industrial security functions that support the
secure operation of plants, systems, machines and networks.
In order to protect plants, systems, machines and networks against cyber threats, it is
necessary to implement – and continuously maintain – a holistic, state-of-the-art industrial
security concept. Siemens’ products and solutions constitute one element of such a concept.
Customers are responsible for preventing unauthorized access to their plants, systems,
machines and networks. Such systems, machines and components should only be connected
to an enterprise network or the internet if and to the extent such a connection is necessary
and only when appropriate security measures (e.g. 󹪝rewalls and/or network segmentation)
are in place.
For additional information on industrial security measures that may be implemented, please
visit
https://www.siemens.com/industrialsecurity (https://www.siemens.com/industrialsecurity).
Siemens’ products and solutions undergo continuous development to make them more
secure. Siemens strongly recommends that product updates are applied as soon as they are
available and that the latest product versions are used. Use of product versions that are no
longer supported, and failure to apply the latest updates may increase customer’s exposure
to cyber threats.
To stay informed about product updates, subscribe to the Siemens Industrial Security RSS
Feed under
https://www.siemens.com/cert (https://www.siemens.com/cert).
Introduction
SCALANCE XF-200BA
Operating Instructions, 02/2023, C79000-G8976-C470-08 5

Note on 󹪝rmware/software support
Check regularly for new 󹪝rmware/software versions or security updates and apply them. After
the release of a new version, previous versions are no longer supported and are not maintained.
Catalogs
You will 󹪝nd the article numbers for the Siemens products of relevance here in the following
catalogs:
• SIMATIC NET Industrial Communication / Industrial Identi󹪝cation, catalog IKPI
• SIMATIC Products for Totally Integrated Automation and Micro Automation, catalog ST70
• Industry Mall - catalog and ordering system for automation and drive technology, Online
catalog (https://mall.industry.siemens.com/goos/WelcomePage.aspx?regionUrl=/
de&language=en)
You can request the catalogs and additional information from your Siemens representative.
Device defective
If a fault develops, send the device to your SIEMENS representative for repair. Repairs on-site are
not possible.
Decommissioning
Shut down the device properly to prevent unauthorized persons from accessing con󹪝dential
data in the device memory.
To do this, restore the factory settings on the device.
Also restore the factory settings on the storage medium.
Recycling and disposal
The products are low in pollutants, can be recycled and meet the requirements of the WEEE
directive 2012/19/EU for the disposal of electrical and electronic equipment.
Do not dispose of the products at public disposal sites.
For environmentally friendly recycling and the disposal of your old device contact a certi󹪝ed
disposal company for electronic scrap or your Siemens contact (Product return (https://
support.industry.siemens.com/cs/ww/en/view/109479891)).
Note the di󹪜erent national regulations.
Trademarks
The following and possibly other names not identi󹪝ed by the registered trademark sign ® are
registered trademarks of Siemens AG:
SCALANCE, C-PLUG, OLM
Introduction
SCALANCE XF-200BA
6Operating Instructions, 02/2023, C79000-G8976-C470-08

Table of contents
Introduction ........................................................................................................................................... 3
1 Safety notices ........................................................................................................................................ 9
2 Recommendations on network security.............................................................................................. 11
3 Description of the device..................................................................................................................... 19
3.1 Properties and functions .................................................................................................... 19
3.2 Product overview ............................................................................................................... 21
3.2.1 Accessories........................................................................................................................ 23
3.2.2 Spare parts ........................................................................................................................ 26
3.3 Device views...................................................................................................................... 27
3.4 SET button......................................................................................................................... 27
3.5 LED display ........................................................................................................................ 29
3.5.1 LED "L"............................................................................................................................... 29
3.5.2 "F" LED............................................................................................................................... 29
3.5.3 "RM" LED............................................................................................................................ 30
3.6 C-PLUG .............................................................................................................................. 30
3.6.1 Function of the C-PLUG ...................................................................................................... 30
3.6.2 Replacing the C-PLUG......................................................................................................... 32
4 Installation and removal...................................................................................................................... 35
4.1 Safety notices for installation ............................................................................................. 35
4.2 Mounting on DIN rails ........................................................................................................ 39
4.3 Mounting bus adapters ...................................................................................................... 40
4.4 Mounting tensile strain relief ............................................................................................. 42
4.5 Disassembly....................................................................................................................... 43
5 Connecting up ..................................................................................................................................... 45
5.1 Safety when connecting up................................................................................................ 45
5.2 Industrial Ethernet ............................................................................................................. 48
5.2.1 Electrical............................................................................................................................ 48
5.2.2 Optical............................................................................................................................... 50
5.3 Wiring rules ....................................................................................................................... 51
5.4 Power supply ..................................................................................................................... 51
5.5 Signaling contact............................................................................................................... 53
5.6 Grounding ......................................................................................................................... 54
SCALANCE XF-200BA
Operating Instructions, 02/2023, C79000-G8976-C470-08 7

6 Maintenance and cleaning .................................................................................................................. 55
7 Error correction.................................................................................................................................... 57
7.1 Downloading new 󹪝rmware using TFTP without WBM and CLI............................................. 57
7.2 Restoring the factory settings............................................................................................. 58
8 Technical speci󹪝cations ....................................................................................................................... 59
8.1 SCALANCE XF-200BA technical speci󹪝cations ..................................................................... 59
8.2 Cable lengths..................................................................................................................... 61
8.2.1 Copper cable (RJ45 connector)........................................................................................... 61
8.2.2 Plastic Optical Fiber (SCRJ connector) ................................................................................. 62
8.2.3 Polymer Cladded Fiber (SCRJ connector)............................................................................. 62
8.2.4 Glass 󹪝ber (LC connector)................................................................................................... 62
8.3 Switching properties .......................................................................................................... 63
8.4 Mechanical stability (in operation) ..................................................................................... 64
9 Dimension drawings............................................................................................................................ 65
A Approvals............................................................................................................................................. 67
Index .................................................................................................................................................... 73
Table of contents
SCALANCE XF-200BA
8Operating Instructions, 02/2023, C79000-G8976-C470-08

Safety notices 1
Read the safety notices
Note the following safety notices. These relate to the entire working life of the device.
You should also read the safety notices relating to handling in the individual sections,
particularly in the sections "Installation" and "Connecting up".
CAUTION
To prevent injury and damage, read the manual before using the device.
Safety notices on use in hazardous areas
General safety notices relating to protection against explosion
WARNING
EXPLOSION HAZARD
Do not open the device when the supply voltage is turned on.
Safety notices when using the device according to Hazardous Locations (HazLoc)
If you use the device under HazLoc conditions you must also keep to the following safety
notices in addition to the general safety notices for protection against explosion:
This equipment is suitable for use in Class I, Division 2, Groups A, B, C and D or non-hazardous
locations only.
This equipment is suitable for use in Class I, Zone 2, Group IIC or non-hazardous locations only.
SCALANCE XF-200BA
Operating Instructions, 02/2023, C79000-G8976-C470-08 9

Safety notices
SCALANCE XF-200BA
10 Operating Instructions, 02/2023, C79000-G8976-C470-08

Recommendations on network security 2
NOTICE
Information security
Connect to the device and change the standard password for the user set in the factory "admin"
and "" before you operate the device.
To prevent unauthorized access to the device and/or network, observe the following security
recommendations.
General
• Check the device regularly to ensure that these recommendations and/or other internal
security policies are complied with.
• Evaluate the security of your location and use a cell protection concept with suitable products
(https://www.industry.siemens.com/topics/global/en/industrial-security/pages/
default.aspx).
• When the internal and external network are disconnected, an attacker cannot access internal
data from the outside. Therefore operate the device only within a protected network area.
• No product liability will be accepted for operation in a non-secure infrastructure.
• Use VPN to encrypt and authenticate communication from and to the devices.
• For data transmission via a non-secure network, use an encrypted VPN tunnel (IPsec,
OpenVPN).
• Separate connections correctly (WBM, SSH etc.).
• Check the user documentation of other Siemens products that are used together with the
device for additional security recommendations.
• Using remote logging, ensure that the system protocols are forwarded to a central logging
server. Make sure that the server is within the protected network and check the protocols
regularly for potential security violations or vulnerabilities.
Physical access
• Restrict physical access to the device to quali󹪝ed personnel because the plug-in data medium
can contain sensitive data.
• Lock unused physical interfaces on the device. Unused interfaces can be used to gain access
to the plant without permission.
SCALANCE XF-200BA
Operating Instructions, 02/2023, C79000-G8976-C470-08 11

Software (security functions)
• Keep the 󹪝rmware up to date. Check regularly for security updates for the device. You can
󹪝nd information on this at the Industrial Security (https://www.siemens.com/
industrialsecurity) website.
• Inform yourself regularly about security recommendations published by Siemens
ProductCERT (https://www.siemens.com/cert/en/cert-security-advisories.htm).
• Only activate protocols that you require to use the device.
• Restrict access to the management of the device with rules in an access control list (ACL).
• The option of VLAN structuring provides protection against DoS attacks and unauthorized
access. Check whether this is practical or useful in your environment.
• Use a central logging server to log changes and accesses. Operate your logging server within
the protected network area and check the logging information regularly.
Authentication
Note
Accessibility risk - Risk of data loss
Do not lose the passwords for the device. Access to the device can only be restored by resetting
the device to factory settings which completely removes all con󹪝guration data.
• Replace the default passwords for all user accounts, access modes and applications (if
applicable) before you use the device.
•De󹪝ne rules for the assignment of passwords.
• Use passwords with a high password strength. Avoid weak passwords, (e.g. password1,
123456789, abcdefgh) or recurring characters (e.g. abcabc).
This recommendation also applies to symmetrical passwords/keys con󹪝gured on the device.
• Make sure that passwords are protected and only disclosed to authorized personnel.
• Do not use the same passwords for multiple user names and systems.
• Store the passwords in a safe location (not online) to have them available if they are lost.
• Regularly change your passwords to increase security.
• A password must be changed if it is known or suspected to be known by unauthorized
persons.
• When user authentication is performed via RADIUS, make sure that all communication takes
place within the security environment or is protected by a secure channel.
• Watch out for link layer protocols that do not o󹪜er their own authentication between
endpoints, such as ARP or IPv4. An attacker could use vulnerabilities in these protocols to
attack hosts, switches and routers connected to your layer 2 network, for example, through
manipulation (poisoning) of the ARP caches of systems in the subnet and subsequent
interception of the data tra󹪟c. Appropriate security measures must be taken for non-secure
layer 2 protocols to prevent unauthorized access to the network. Physical access to the local
network can be secured or secure, higher layer protocols can be used, among other things.
Recommendations on network security
SCALANCE XF-200BA
12 Operating Instructions, 02/2023, C79000-G8976-C470-08

Certi󹪝cates and keys
• The device contains a pre-installed X.509 certi󹪝cate with key. Replace this certi󹪝cate with a
self-made certi󹪝cate with key. Use a certi󹪝cate signed by a reliable external or internal
certi󹪝cation authority. You can install the certi󹪝cate via the WBM ("System > Load and Save").
• Use the certi󹪝cation authority including key revocation and management to sign the
certi󹪝cates.
• Make sure that user-de󹪝ned private keys are protected and inaccessible to unauthorized
persons.
• If there is a suspected security violation, change all certi󹪝cates and keys immediately.
• Use password-protected certi󹪝cates in the format "PKCS #12".
• Use certi󹪝cates with a key length of 4096 bits.
• Verify certi󹪝cates based on the 󹪝ngerprint on the server and client side to prevent "man in the
middle" attacks. Use a second, secure transmission path for this.
• Before sending the device to Siemens for repair, replace the current certi󹪝cates and keys with
temporary disposable certi󹪝cates and keys, which can be destroyed when the device is
returned.
Secure/non-secure protocols and services
• Avoid or disable non-secure protocols and services, for example HTTP, Telnet and TFTP. For
historical reasons, these protocols are available, however not intended for secure
applications. Use non-secure protocols on the device with caution.
• Check whether use of the following protocols and services is necessary:
– Non authenticated and unencrypted ports
– MRP, HRP
– IGMP snooping
– LLDP
– DCP
– Syslog
– RADIUS
– DHCP Options 66/67
– TFTP
– GMRP and GVRP
Recommendations on network security
SCALANCE XF-200BA
Operating Instructions, 02/2023, C79000-G8976-C470-08 13

• The following protocols provide secure alternatives:
– HTTP → HTTPS
– Telnet → SSH
– SNMPv1/v2c → SNMPv3
Check whether use of SNMPv1/v2c. is necessary. SNMPv1/v2c is classi󹪝ed as non-secure.
Use the option of preventing write access. The device provides you with suitable setting
options.
If SNMP is enabled, change the community names. If no unrestricted access is necessary,
restrict access with SNMP.
Use the authentication and encryption mechanisms of SNMPv3.
– TFTP → SFTP
– NTP → NTPsecure
• Use secure protocols when access to the device is not prevented by physical protection
measures.
• If you require non-secure protocols and services, operate the device only within a protected
network area.
• Restrict the services and protocols available to the outside to a minimum.
• If you use RADIUS for management access to the device, activate secure protocols and
services.
Interfaces security
• Disable unused interfaces.
• Use IEEE 802.1X for interface authentication.
• Use the function "Locked Ports" to block interfaces for unknown nodes.
• Use the con󹪝guration options of the interfaces, e.g. the "Edge Type".
•Con󹪝gure the receive ports so that they discard all untagged frames ("Tagged Frames Only").
Available protocols
The following list provides you with an overview of the open protocol ports.
The table includes the following columns:
•Protocol
•Port
•Default port status
– Open
The factory setting of the port is "Open".
– Closed
The factory setting of the port is "Closed".
Recommendations on network security
SCALANCE XF-200BA
14 Operating Instructions, 02/2023, C79000-G8976-C470-08

•Con󹪝gurable port
– ✓
The port status can be changed.
– --
The port status cannot be changed.
•Authentication
Speci󹪝es whether the communication partner is authenticated.
•Encryption
Speci󹪝es whether or not the transfer is encrypted.
List of available services
The following is a list of all available services and their ports through which the device can be
accessed.
The table includes the following columns:
•Service
The services that the device supports
•Default port status
This is the status of the port in the delivery state (factory setting).
•Con󹪝gurable port/service
Indicates whether the port number or the service can be con󹪝gured via WBM / CLI.
•Authentication
Speci󹪝es whether the communication partner is authenticated.
If optional, the authentication can be con󹪝gured as required.
•Encryption
Speci󹪝es whether the transfer is encrypted.
If optional, the encryption can be con󹪝gured as required.
The following is a list of all available protocols and services as well as their ports through
which the device can be accessed.
Service Protocol / Port
number
Default port
status
Con󹪝gurable Authentication Encryption 5)
Port Service
DHCPv4 Server UDP/67

Closed - ✓ - -
DHCPv4 Client UDP/68 Open - ✓ - -
EtherNet/IP TCP/44818
UDP/2222
UDP/44818
Closed
(Open with
EtherNetIP var‐
iants)
- ✓ - -
HTTP Server/Client 3) TCP/80 Closed ✓ ✓ ✓ -
HTTPS WBM Server/
Client
TCP/443 Open ✓ ✓ ✓ ✓
NTP Client UDP/123 Closed ✓ ✓ - -
NTP (secure) UDP/123 Closed ✓ ✓ ✓ -
Recommendations on network security
SCALANCE XF-200BA
Operating Instructions, 02/2023, C79000-G8976-C470-08 15

Service Protocol / Port
number
Default port
status
Con󹪝gurable Authentication Encryption 5)
Port Service
PROFINET UDP/34964
UDP/49151 …
49159 1)
Open -- ✓ - -
RADIUS Client UPD/1812 4)
UPD/1813 4)
Outbound only ✓ ✓ - -
UDP/3799 Open ✓ ✓ - -
SFTP Server UDP/22 Outbound only ✓ ✓ ✓ ✓
SMTP Client TCP/25 Closed ✓ ✓ - -
SMTP Client (secure) TCP/465 Closed ✓ ✓ ✓ ✓
SNMPv1/v2c 2) 3) UDP/161 Open ✓ ✓ - -
SNMPv3 UDP/161 Open ✓ ✓ Optional Optional
SNMP Traps UDP/162 Outbound only -- ✓ - -
SNTP Client UDP/123 Closed ✓ ✓ - -
SSH CLI Server TCP/22 Open ✓ ✓ ✓ ✓
Syslog Client UDP/514 Closed ✓ ✓ - -
Syslog (secure) Client TCP/6514 Closed ✓ ✓ - ✓
Telnet 3) TCP/23 Closed ✓ ✓ ✓ -
TFTP Client UDP/69 Outbound only ✓ ✓ - -
1) Port number can be con󹪝gured via the WBM.
2) Read-only access only.
3) Protocol according to Security by Default.
4) The port is closed by default and is displayed when a RADIUS server is con󹪝gured. Port number can be con󹪝gured via the WBM.
5) You can 󹪝nd additional information on the encryption methods used in the WBM appendix "Ciphers used".
The following is a list of all available Layer 2 services through which the device can be
accessed.
The table includes the following columns:
•Layer 2 service
The Layer 2 services that the device supports.
•Default status
The default status of the service (open or closed).
•Service con󹪝gurable
Indicates whether the service can be con󹪝gured via WBM / CLI.
Layer 2 service Default
status
Service con󹪝gura‐
ble
DCP Setup mode 1) ✓
LLDP Open ✓
Recommendations on network security
SCALANCE XF-200BA
16 Operating Instructions, 02/2023, C79000-G8976-C470-08

Layer 2 service Default
status
Service con󹪝gura‐
ble
RSTP Closed ✓
MSTP Open ✓
1) Setting according to Security by Default.
Recommendations on network security
SCALANCE XF-200BA
Operating Instructions, 02/2023, C79000-G8976-C470-08 17

Recommendations on network security
SCALANCE XF-200BA
18 Operating Instructions, 02/2023, C79000-G8976-C470-08

Description of the device 3
3.1 Properties and functions
Y functionality
With the IE switch SCALANCE XF204-2BA DNA you can connect a redundant PROFINET ring
consisting of S2 devices (󹪝eld area) to a fault-tolerant PROFINET system (R1 system). DNA stands
for Dual Network Access or also Y switch functionality. Devices with Y functionality do not
support VLANs.
The SCALANCE XF204-2BA DNA is connected via both ring ports to a PROFINET ring. Via the
two Y ports it is connected to a fault-tolerant PROFINET system. With this link the S2 devices
are connected to an H system. Due to this, communication failures of the 󹪝eld devices to the
CPU are further reduced and the availability of the entire network signi󹪝cantly increased.
Via the SCALANCE XF204-2BA the Y switch is connected to the H-CPU. The SCALANCE
XF204-2BA does not have Y functionality, it supports VLANs.
SCALANCE XF-200BA
Operating Instructions, 02/2023, C79000-G8976-C470-08 19

PN/PN coupler
PROFINET / Industrial Ethernet (redundant automation system)
SIMATIC S7-410-5H
SCALANCE XF204-2BA
SIMATIC
ET 200M
SIMATIC
ET 200SP
SCALANCE XF204-2BA
SCALANCE XF204-2BA DNA (Y-Switch)
SCALANCE
XC-200
SCALANCE
XP-200
PROFINET/
Industrial Ethernet
PROFIBUS PA
SIMOTICS M
SIMOTICS M
SIMOCODE
pro V
SINAMICS S120
SIMATIC CFU
SIMATIC CFU
SIMATIC
ET 200SP HA
HART (4...20 mA)
Figure3-1 Linking S2 devices into a fault-tolerant H system with SCALANCE XF-200BA
Protection of the Y functionality
Between the two Y ports of the SCALANCE XF204-2BA DNA there is no device-internal
communication.
if you change the ring ports in the con󹪝guration, the two remaining ports automatically
become Y ports. This means that Y functionality is always present.
You cannot con󹪝gure functions required for the Y functionality. Essentially this applies to the
con󹪝guration of VLANs. You can con󹪝gure all other functions.
Description of the device
3.1Properties and functions
SCALANCE XF-200BA
20 Operating Instructions, 02/2023, C79000-G8976-C470-08