Siemens SIMATIC SCALANCE X-300M PoE Administrator guide

SIMATIC NET
Industrial Ethernet switches
SCALANCE X-300M PoE
Compact Operating Instructions
11/2019
A5E02630810-13
Introduction 1
Safety notes 2
Recommendations on
network security 3
Device description 4
Assembling 5
Connecting 6
Technical data 7
Dimension drawings 8
Approvals 9
Appendix A

Legal information
Warning notice system
This manual contains notices you have to observe in order to ensure your personal safety, as well as to prevent
damage to property. The notices referring to your personal safety are highlighted in the manual by a safety alert
symbol, notices referring only to property damage have no safety alert symbol. These notices shown below are
graded according to the degree of danger.
DANGER
indicates that death or severe personal injury will result if proper precautions are not taken.
WARNING
indicates that death or severe personal injury may result if proper precautions are not taken.
CAUTION
indicates that minor personal injury can result if proper precautions are not taken.
NOTICE
indicates that property damage can result if proper precautions are not taken.
If more than one degree of danger is present, the warning notice representing the highest degree of danger will be
used. A notice warning of injury to persons with a safety alert symbol may also include a warning relating to property
damage.
Qualified Personnel
The product/system described in this documentation may be operated only by personnel qualified for the specific
task in accordance with the relevant documentation, in particular its warning notices and safety instructions. Qualified
personnel are those who, based on their training and experience, are capable of identifying risks and avoiding
potential hazards when working with these products/systems.
Proper use of Siemens products
Note the following:
WARNING
Siemens products may only be used for the applications described in the catalog and in the relevant technical
documentation. If products and components from other manufacturers are used, these must be recommended or
approved by Siemens. Proper transport, storage, installation, assembly, commissioning, operation and
maintenance are required to ensure that the products operate safely and without any problems. The permissible
ambient conditions must be complied with. The information in the relevant documentation must be observed.
Trademarks
All names identified by ® are registered trademarks of Siemens AG. The remaining trademarks in this publication
may be trademarks whose use by third parties for their own purposes could violate the rights of the owner.
Disclaimer of Liability
We have reviewed the contents of this publication to ensure consistency with the hardware and software described.
Since variance cannot be precluded entirely, we cannot guarantee full consistency. However, the information in this
publication is reviewed regularly and any necessary corrections are included in subsequent editions.
Siemens AG
Digital Industries
Postfach 48 48
90026 NÜRNBERG
GERMANY
A5E02630810-13
Ⓟ 11/2019 Subject to change
Copyright © Siemens AG 2010 - 2019.
All rights reserved

Table of contents
1 Introduction...................................................................................................................................................5
2 Safety notes................................................................................................................................................11
3 Recommendations on network security......................................................................................................13
4 Device description ......................................................................................................................................17
4.1 Product overview....................................................................................................................17
4.2 Product properties and device views .....................................................................................20
4.3 SET/SELECT button ..............................................................................................................23
4.4 LED display ............................................................................................................................24
4.5 C-PLUG..................................................................................................................................27
4.5.1 Area of application and function of the C-PLUG ....................................................................27
4.5.2 Removing and inserting the C-PLUG (compact housing) ......................................................28
5 Assembling .................................................................................................................................................31
5.1 Safety notices for installation .................................................................................................31
5.2 Installation ..............................................................................................................................33
5.3 Installing on an S7-300 standard rail......................................................................................33
5.4 Installation on a DIN rail .........................................................................................................34
5.5 Wall mounting ........................................................................................................................35
5.6 Installation of modular devices...............................................................................................36
5.6.1 Installation and removal of media modules............................................................................36
5.6.2 SFP installation in SFP media module...................................................................................41
6 Connecting .................................................................................................................................................43
6.1 Safety when connecting up ....................................................................................................43
6.2 Notes on commissioning ........................................................................................................45
6.3 Wiring rules ............................................................................................................................46
6.4 Grounding ..............................................................................................................................47
6.5 24 VDC signaling contact.......................................................................................................47
6.6 Connecting the external 24 VDC power supply .....................................................................48
7 Technical data ............................................................................................................................................51
7.1 Construction, installation and environmental conditions ........................................................51
7.2 Connectors and electrical data...............................................................................................53
7.3 Cable lengths .........................................................................................................................54
7.4 Other properties .....................................................................................................................55
SCALANCE X-300M PoE
Compact Operating Instructions, 11/2019, A5E02630810-13 3

8 Dimension drawings ...................................................................................................................................59
9 Approvals....................................................................................................................................................63
9.1 Mechanical stability in operation ............................................................................................69
A Appendix.....................................................................................................................................................71
A.1 Connector system M12/X-coded according to IEC 61076-2-109...........................................71
Index...........................................................................................................................................................73
Table of contents
SCALANCE X-300M PoE
4Compact Operating Instructions, 11/2019, A5E02630810-13

Introduction 1
Purpose of the compact operating instructions
These compact operating instructions support you when installing and connecting devices of
the SCALANCE X-300M PoE product group.
Validity of these compact operating instructions
These compact operating instructions are valid for the following devices:
● SCALANCE X308-2M PoE as of firmware version 3.3.0
Designations used
Classification Description Terms used
Product line For all devices and variants of all product groups within the SCALANCE
X-300 product line, the term "IE Switches X-300" is used.
IE Switches X-300
Product group For all devices and variants of a product group, only the product group is
used.
X-300M PoE
Device For a device, only the device name is used. X308-2M PoE
Variant For a variant of the device, the device name has the appropriate variant
added to it in brackets.
(-)
Overview of technical documentation on the IE switches SCALANCE X‑300
You will find the technical documentation for the SCALANCE X‑300 product line in the following
documents:
● Configuration manual (PH), available as PDF document
The configuration manual describes the software for the two product lines SCALANCE
X‑300 and SCALANCE X‑400.
● Compact operating instructions (BAK), supplied with the device in printed form
The compact operating instructions describe devices within a product group.
● Operating instructions (BA), available as PDF document
The operating instructions describe all devices of the product line and provide generally
valid information on the devices.
SCALANCE X-300M PoE
Compact Operating Instructions, 11/2019, A5E02630810-13 5

Type of document Relevant for the follow‐
ing products
Document identification
number
Contents
Configuration Manual
PH X300/X400 All devices of the SCA‐
LANCE X‑300 and SCA‐
LANCE X‑400 product
lines
C79000-G89000-C187 Configuration of the de‐
vice
Operating instructions
BA X-300 All devices of the SCA‐
LANCE X‑300 product
line
A5E01113043 Device description,
technical specifications,
information on instal‐
ling, connecting and
commissioning
Compact operating instructions
BAK X-300 SCALANCE X-300 A5E00982643A Device description,
technical specifications,
information on instal‐
ling, connecting and
commissioning
BAK X-300M SCALANCE X-300M A5E02630801A
BAK XR-300M SCALANCE XR-300M A5E02661171A
BAK X-300 EEC SCALANCE X-300EEC A5E02661176A
BAK XR-300M EEC SCALANCE XR-300M
EEC
A5E02630809A
BAK X-300M PoE SCALANCE X-300M
PoE
A5E02630810A
BAK XR-300M PoE SCALANCE XR-300M
PoE
A5E02661178A
BAK MM900 SCALANCE MM900
(media modules)
A5E02630805A
BAK SFP
Information sheet
SCALANCE SFP (plug-
in transceivers)
A5E02630804A
A5E02648904A
Device description,
technical specifications,
information on instal‐
ling, connecting and
commissioning
Documentation on configuration
You will find detailed information on configuring the devices in the configuration manual:
● SIMATIC NET: Industrial Ethernet switches SCALANCE X-300 / X-400 Configuration
Manual
You will find the Configuration Manual here:
● On the data medium that ships with some products:
– Product CD / product DVD
– SIMATIC NET Manual Collection
● On the Internet pages of Siemens Industry Online Support (https://
support.industry.siemens.com/cs/ww/en/ps/15297/man).
Introduction
SCALANCE X-300M PoE
6Compact Operating Instructions, 11/2019, A5E02630810-13

Additional documentation
The manual
● "SIMATIC NET Industrial Ethernet Twisted Pair and Fiber Optic Networks (https://
support.industry.siemens.com/cs/ww/en/view/1172207)"
contains additional information on other SIMATIC NET products that you can operate along
with the devices of the SCALANCE X‑300 product line in an Industrial Ethernet network.
Integration in STEP 7 projects
The current GSDML file must be used for integration in STEP 7 V5.4 SP5 projects. This applies
to all products covered by these operating instructions.
You can obtain the relevant GSD file from the Internet under the following entry ID:
46183514 (https://support.industry.siemens.com/cs/ww/en/view/46183514)
You will find the file for the firmware update V3.3.1 for X-300 under entry ID "46183538".
Further documentation
In the system manuals "Industrial Ethernet / PROFINET Industrial Ethernet" and "Industrial
Ethernet / PROFINET passive network components", you will find information on other
SIMATIC NET products that you can operate along with the devices of this product line in an
Industrial Ethernet network.
There, you will find among other things optical performance data of the communications partner
that you require for the installation.
You will find the system manuals here:
● On the data medium that ships with some products:
– Product CD / product DVD
– SIMATIC NET Manual Collection
● On the Internet pages of Siemens Industry Online Support:
– Industrial Ethernet / PROFINET Industrial Ethernet System Manual (https://
support.industry.siemens.com/cs/ww/en/view/27069465)
– Industrial Ethernet / PROFINET Passive Network Components System Manual (https://
support.industry.siemens.com/cs/ww/en/view/84922825)
SIMATIC NET manuals
You will find the SIMATIC NET manuals here:
● On the data medium that ships with some products:
– Product CD / product DVD
– SIMATIC NET Manual Collection
● On the Internet pages of Siemens Industry Online Support (https://
support.industry.siemens.com/cs/ww/en/ps/15247).
Introduction
SCALANCE X-300M PoE
Compact Operating Instructions, 11/2019, A5E02630810-13 7

SIMATIC NET glossary
Explanations of many of the specialist terms used in this documentation can be found in the
SIMATIC NET glossary.
You will find the SIMATIC NET glossary here:
● SIMATIC NET Manual Collection or product DVD
The DVD ships with certain SIMATIC NET products.
● On the Internet under the following address:
50305045 (https://support.industry.siemens.com/cs/ww/en/view/50305045)
Security information
Siemens provides products and solutions with industrial security functions that support the
secure operation of plants, systems, machines and networks.
In order to protect plants, systems, machines and networks against cyber threats, it is
necessary to implement – and continuously maintain – a holistic, state-of-the-art industrial
security concept. Siemens’ products and solutions constitute one element of such a concept.
Customers are responsible for preventing unauthorized access to their plants, systems,
machines and networks. Such systems, machines and components should only be connected
to an enterprise network or the internet if and to the extent such a connection is necessary and
only when appropriate security measures (e.g. firewalls and/or network segmentation) are in
place.
For additional information on industrial security measures that may be implemented, please
visit
https://www.siemens.com/industrialsecurity (https://www.siemens.com/industrialsecurity)
Siemens’ products and solutions undergo continuous development to make them more secure.
Siemens strongly recommends that product updates are applied as soon as they are available
and that the latest product versions are used. Use of product versions that are no longer
supported, and failure to apply the latest updates may increase customers’ exposure to cyber
threats.
To stay informed about product updates, subscribe to the Siemens Industrial Security RSS
Feed under
https://www.siemens.com/industrialsecurity (https://www.siemens.com/industrialsecurity)
Catalogs
You will find the article numbers for the Siemens products of relevance here in the following
catalogs:
● SIMATIC NET Industrial Communication / Industrial Identification, catalog IK PI
● SIMATIC Products for Totally Integrated Automation and Micro Automation, catalog ST 70
● Industry Mall - catalog and ordering system for automation and drive technology, Online
catalog (https://mall.industry.siemens.com/goos/WelcomePage.aspx?regionUrl=/
de&language=en)
You can request the catalogs and additional information from your Siemens representative.
Introduction
SCALANCE X-300M PoE
8Compact Operating Instructions, 11/2019, A5E02630810-13

Device defective
If a fault develops, please send the device to your SIEMENS service center for repair. Repairs
on-site are not possible.
Recycling and disposal
The products are low in pollutants, can be recycled and meet the requirements of the WEEE
directive 2012/19/EU for the disposal of electrical and electronic equipment.
Do not dispose of the products at public disposal sites.
For environmentally friendly recycling and the disposal of your old device contact a certified
disposal company for electronic scrap or your Siemens contact (Product return (https://
support.industry.siemens.com/cs/ww/en/view/109479891)).
Note the different national regulations.
SIMATIC NET, SCALANCE, C-PLUG, OLM
Trademarks
The following and possibly other names not identified by the registered trademark sign ® are
registered trademarks of Siemens AG:
Introduction
SCALANCE X-300M PoE
Compact Operating Instructions, 11/2019, A5E02630810-13 9

Introduction
SCALANCE X-300M PoE
10 Compact Operating Instructions, 11/2019, A5E02630810-13

Safety notes 2
Read the safety notices
Note the following safety notices. These relate to the entire working life of the device.
You should also read the safety notices relating to handling in the individual sections,
particularly in the sections "Installation" and "Connecting up".
CAUTION
To prevent injury, read the manual before use.
Safety notices on use in hazardous areas
General safety notices relating to protection against explosion
WARNING
EXPLOSION HAZARD
Do not open the device when the supply voltage is turned on.
Safety notices when using the device according to Hazardous Locations (HazLoc)
If you use the device under HazLoc conditions you must also keep to the following safety
notices in addition to the general safety notices for protection against explosion:
This equipment is suitable for use in Class I, Division 2, Groups A, B, C and D or non-hazardous
locations only.
This equipment is suitable for use in Class I, Zone 2, Group IIC or non-hazardous locations only.
SCALANCE X-300M PoE
Compact Operating Instructions, 11/2019, A5E02630810-13 11

Safety notes
SCALANCE X-300M PoE
12 Compact Operating Instructions, 11/2019, A5E02630810-13

Recommendations on network security 3
NOTICE
Information security
Connect to the device and change the standard passwords for the users "admin" and "user"
before you operate the device. To be able to change passwords you need to be logged in with
write access to the configuration data.
To prevent unauthorized access, note the following security recommendations.
General
● You should make regular checks to make sure that the device meets these
recommendations and/or other security guidelines.
● Evaluate your plant as a whole in terms of security. Use a cell protection concept with
suitable products (https://www.industry.siemens.com/topics/global/en/industrial-security/
pages/default.aspx).
● When the internal and external network are disconnected, an attacker cannot access
internal data from the outside. Therefore operate the device only within a protected network
area.
● For communication via non-secure networks use additional devices with VPN functionality
to encrypt and authenticate the communication.
● Terminate management connections correctly (WBM. Telnet, SSH etc.).
Physical access
● Restrict physical access to the device to qualified personnel because the plug-in data
medium can contain sensitive data.
● Lock unused physical interfaces on the device. Unused interfaces can be used to gain
access to the plant without permission.
Software (security functions)
● Keep the firmware up to date. Check regularly for security updates for the device. You can
find information on this at the Industrial Security (https://www.siemens.com/
industrialsecurity) website.
● Inform yourself regularly about security recommendations published by Siemens
ProductCERT (https://www.siemens.com/cert/en/cert-security-advisories.htm).
● Only activate protocols that you require to use the device.
● Restrict access to the management of the device with rules in an access control list (ACL).
SCALANCE X-300M PoE
Compact Operating Instructions, 11/2019, A5E02630810-13 13

● The option of VLAN structuring provides protection against DoS attacks and unauthorized
access. Check whether this is practical or useful in your environment.
● Use a central logging server to log changes and accesses. Operate your logging server
within the protected network area and check the logging information regularly.
Passwords
● Define rules for the assignment of passwords.
● Regularly change your passwords to increase security.
● Use passwords with a high password strength.
● Make sure that all passwords are protected and inaccessible to unauthorized persons.
● Do not use the same password for different users and systems.
Certificates and keys
● On the device there is a preset SSL certificate with key. Replace this certificate with a self-
made certificate with key. We recommend that you use a certificate signed either by a
reliable external or by an internal certification authority.
● Use a certification authority including key revocation and management to sign certificates.
● Make sure that user-defined private keys are protected and inaccessible to unauthorized
persons.
● It is recommended that you use password-protected certificates in the PKCS #12 format
● Verify certificates and fingerprints on the server and client to prevent "man in the middle"
attacks.
● It is recommended that you use certificates with a key length of at least 2048 bits.
● Change certificates and keys immediately, if there is a suspicion of compromise.
Recommendations on network security
SCALANCE X-300M PoE
14 Compact Operating Instructions, 11/2019, A5E02630810-13

Secure/non-secure protocols
● Avoid or disable non-secure protocols, for example Telnet and TFTP. For historical reasons,
these protocols are available, however not intended for secure applications. Use non-
secure protocols on the device with caution.
● Check whether use of the following protocols and services is necessary:
– Non authenticated and unencrypted ports
– MRP, HRP
– LLDP
– DHCP Options 66/67
The following protocols provide secure alternatives:
– HTTP → HTTPS
– TFTP → FTPS
– Telnet → SSH
– SNTP → NTP
– SNMPv1/v2c → SNMPv3
Check whether use of SNMPv1/v2c. is necessary. SNMPv1/v2c are classified as non-
secure. Use the option of preventing write access. The device provides you with suitable
setting options.
If SNMP is enabled, change the community names. If no unrestricted access is
necessary, restrict access with SNMP.
Use the authentication and encryption mechanisms of SNMPv3.
● Use secure protocols when access to the device is not prevented by physical protection
measures.
● If you require non-secure protocols and services, operate the device only within a protected
network area.
● Restrict the services and protocols available to the outside to a minimum.
● For the DCP function, enable the "DCP read-only" mode after commissioning.
Available protocols
The following list provides you with an overview of the open protocol ports.
The table includes the following columns:
●Protocol
●Port number
●Port status
– Open
– Closed
●Factory setting
Indicates the state of the port on delivery or after reset to factory settings.
Recommendations on network security
SCALANCE X-300M PoE
Compact Operating Instructions, 11/2019, A5E02630810-13 15

●Authentication
Specifies whether the communication partner is authenticated.
●Encryption
Specifies whether or not the transfer is encrypted.
Protocol Port number Port status Factory setting Authentication Encryption
FTP TCP/21 Open Open Yes No
SSH TCP/22 Open Open Yes Yes
TELNET TCP/23 Open
(when config‐
ured)
Open Yes Yes
HTTP TCP/80 Open
(when config‐
ured)
Open Yes No
PROFINET IO
Service
TCP/84 Open Open No No
HTTPS TCP/443 Open Open Yes Yes
DHCP UDP/68 Open
(when config‐
ured)
Open No No
SNTP UDP/123 Open
(when config‐
ured)
Closed No No
NTP (secure) Yes
SNMP UDP/161 Open
(when config‐
ured)
Open Yes Yes
(SNMPv3)
RADIUS UDP/1812,
1813
Open Open Yes No
PROFINET IO UDP/34964
UDP/49152,
49153 *)
Open
(when config‐
ured)
Open No No
*) These ports are assigned dynamically and can differ from the values specified here.
Recommendations on network security
SCALANCE X-300M PoE
16 Compact Operating Instructions, 11/2019, A5E02630810-13

Device description 4
4.1 Product overview
Article numbers
Type Article number
X308-2M PoE 6GK5 308-2QG00-2AA2
6GK5 308-2QG10-2AA2
Interfaces
Type RJ-45 port electrical
10/100/1000 Mbps
Module slots
X308-2M PoE 4 2
Structure of the type designation
The type designation of an IE Switch X-300 is made up of several parts that have the following
meaning:
>@&RPSDFWKRXVLQJR5DFNGHYLFH1XPEHURIHOHFWULFDOSRUWVRUWRWDOQXPEHURISRUWVLQPRGXODUGHYLFHV1XPEHURIRSWLFDOSRUWVRUQXPEHURIPRGXOHVORWVLQPRGXODUGHYLFHV>@6WDQGDUGYHUVLRQTS7UDQVSRUWDWLRQ6\VWHP>@6WDQGDUGYHUVLRQEEC([SDQGHGWHPSHUDWXUHUDQJHPoE3RZHURYHU(WKHUQHW>@'HYLFHVZLWKRXWPRGXOHVORWVM0RGXODUGHYLFH,QWHUIDFHX 3 -
SCALANCE X-300M PoE
Compact Operating Instructions, 11/2019, A5E02630810-13 17

Interfaces of devices without optical ports:
Interface Property
FE Electrical RJ-45 port for 10/100 Mbps.
[-] Electrical RJ-45 port for 10/100 Mbps or 10/100/1000 Mbps.
Interfaces of devices with optical ports:
Interface Property
FE SC port 100 Mbps multimode FO cable (up to max. 5 km).
LD FE SC port 100 Mbps single mode FO cable (up to max. 26 km).
[-] SC port 1000 Mbps multimode FO cable (up to max. 750 m).
LD SC port 1000 Mbps single mode FO cable (up to max. 10 km).
LH SC port 1000 Mbps single mode FO cable (up to max. 40 km).
LH+ SC port 1000 Mbps single mode FO cable (up to max. 70 km).
If information applies to all devices, the term "IE Switches X-300" is used. If information applies
to only a particular product group, the relevant names will be used without extra information on
the type or number of interfaces. Examples: "X-300" stands for non-modular devices with a
compact housing, "XR-300" means all rack devices, "X-300M" means all modular devices etc.
Unpacking and checking
WARNING
Do not use any parts that show evidence of damage
If you use damaged parts, there is no guarantee that the device will function according to the
specification.
If you use damaged parts, this can lead to the following problems:
● Injury to persons
● Loss of the approvals
● Violation of the EMC regulations
● Damage to the device and other components
Use only undamaged parts.
1. Make sure that the package is complete.
2. Check all the parts for transport damage.
Scope of delivery
Note
When shipped, the slots for the media modules have dummy covers fitted.
Device description
4.1 Product overview
SCALANCE X-300M PoE
18 Compact Operating Instructions, 11/2019, A5E02630810-13

Note
Labels to identify the installed MM900 media modules are supplied with the modular devices
(M).
The following components are supplied with a SCALANCE X‑300M PoE:
● A device with a C-PLUG exchangeable medium
● A 4-pin terminal block for the power supply
● A 2-pin terminal block for the signaling contact
● A product CD with documentation and software
Device description
4.1 Product overview
SCALANCE X-300M PoE
Compact Operating Instructions, 11/2019, A5E02630810-13 19

4.2 Product properties and device views
Possible attachments
The SCALANCE X308-2M PoE is a partially modular device and has eight ports.
●Four fixed ports in the base device:
Four PoE-compliant ports (RJ-45 jacks with securing collars) for connection of end devices
or other network segments.
●Four modular ports via module slots:
Two media modules (optical or electrical as required) can be combined using slots (S1-S2)
depending on the application. End devices and other network segments are connected
according to the media modules being used.
Note
When shipped, the slots for the media modules have a dummy cover fitted.
Figure 4-1 SCALANCE X308-2M PoE with dummy covers
Device description
4.2 Product properties and device views
SCALANCE X-300M PoE
20 Compact Operating Instructions, 11/2019, A5E02630810-13