Siemens SCALANCE W788-1 User manual

SCALANCE W788-x / W748-1
___________________
___________________
___________________
___________________
___________________
___________________
___________________
___________________
___________________
SIMATIC NET
Industrial Wireless LAN
SCALANCE W788-x / W748-1
Operating Instructions
06/2016
A5E03678333
-10
Information on the Internet
1
Introduction
2
Security recommendations
3
Description
4
Mounting
5
Connecting up
6
Technical specifications
7
Dimension drawings
8
Certification
9

Siemens AG
Division Process Industries and Drives
Postfach 48 48
90026 NÜRNBERG
GERMANY
A5E03678333-10
Ⓟ
07/2016 Subject to change
Copyright © Siemens AG 2011 - 2016.
All rights reserved
Legal information
Warning notice system
This manual contains notices you have to observe in order to ensure your personal safety, as well as to prevent
damage to property. The notices referring to your personal safety are highlighted in the manual by a safety alert
symbol, notices referring only to property damage have no safety alert symbol. These notices shown below are
graded according to the degree of danger.
DANGER
indicates that death or severe personal injury will result if proper precautions are not taken.
WARNING
indicates that death or severe personal injury may result if proper precautions are not taken.
CAUTION
indicates that minor personal injury can result if proper precautions are not taken.
NOTICE
indicates that property damage can result if proper precautions are not taken.
If more than one degree of danger is present, the warning notice representing the highest degree of danger will
be used. A notice warning of injury to persons with a safety alert symbol may also include a warning relating to
property damage.
Qualified Personnel
The product/system described in this documentation may be operated only by
personnel qualified
for the specific
task in accordance with the relevant documentation, in particular its warning notices and safety instructions.
Qualified personnel are those who, based on their training and experience, are capable of identifying risks and
avoiding potential hazards when working with these products/systems.
Proper use of Siemens products
Note the following:
WARNING
Siemens products may only be used for the applications described in the catalog and in the relevant technical
documentation. If products and components from other manufacturers are used, these must be recommended
or approved by Siemens. Proper transport, storage, installation, assembly, commissioning, operation and
maintenance are required to ensure that the products operate safely and without any problems. The permissible
ambient conditions must be complied with. The information in the relevant documentation must be observed.
Trademarks
All names identified by ® are registered trademarks of Siemens AG. The remaining trademarks in this publication
may be trademarks whose use by third parties for their own purposes could violate the rights of the owner.
Disclaimer of Liability
We have reviewed the contents of this publication to ensure consistency with the hardware and software
described. Since variance cannot be precluded entirely, we cannot guarantee full consistency. However, the
information in this publication is reviewed regularly and any necessary corrections are included in subsequent
editions.

SCALANCE W788-x / W748-1
Operating Instructions, 06/2016, A5E03678333-10 3
Contents
1 Information on the Internet ...................................................................................................................... 5
2 Introduction............................................................................................................................................. 7
2.1 Information on the Operating Instructions ................................................................................7
2.2 Structure of the type designations ............................................................................................8
3 Security recommendations...................................................................................................................... 9
4 Description............................................................................................................................................ 13
4.1 Components of the product ....................................................................................................13
4.2 Description of the device ........................................................................................................14
4.3 LED display.............................................................................................................................16
4.4 Reset button............................................................................................................................18
5 Mounting............................................................................................................................................... 19
5.1 Securing the housing ..............................................................................................................20
5.2 Wall mounting .........................................................................................................................22
5.3 Installing on the S7-300 standard rail .....................................................................................23
5.4 Installing on a DIN rail.............................................................................................................24
6 Connecting up....................................................................................................................................... 27
6.1 Lightning protection, power supply and grounding .................................................................27
6.2 Power supply and Ethernet.....................................................................................................31
6.3 Antenna connectors ................................................................................................................33
6.4 Suitable antenna cables and antennas...................................................................................36
6.5 Digital input/output ..................................................................................................................40
6.6 Replacing the PLUG (C-PLUG or KEY-PLUG) ......................................................................41
7 Technical specifications ........................................................................................................................ 43
7.1 Technical specifications of the SCALANCE W7x8-1).............................................................43
7.2 Technical specifications of the SCALANCE W7x8-2).............................................................46
8 Dimension drawings.............................................................................................................................. 49
9 Certification........................................................................................................................................... 51
Index..................................................................................................................................................... 53

Contents
SCALANCE W788-x / W748-1
4Operating Instructions, 06/2016, A5E03678333-10

SCALANCE W788-x / W748-1
Operating Instructions, 06/2016, A5E03678333-10 5
Information on the Internet
1
Bitte beachten Sie die Warnhinweise und zusätzlichen Informationen in der
Kompaktbetriebsanleitung in Ihrer Sprache im Internet:
http://support.automation.siemens.com/ww/view/at/10806097
http://support.automation.siemens.com/ww/view/ch/10806097
http://support.automation.siemens.com/ww/view/de/10806097
http://support.automation.siemens.com/ww/view/li/10806097
http://support.automation.siemens.com/ww/view/lu/10806097
Please observe the warnings and additional information in the compact operating
instructions in your language in the Internet:
http://support.automation.siemens.com/ww/view/au/10806097
http://support.automation.siemens.com/ww/view/ca/10806097
http://support.automation.siemens.com/ww/view/gb/10806097
http://support.automation.siemens.com/ww/view/ie/10806097
http://support.automation.siemens.com/ww/view/us/10806097
http://support.automation.siemens.com/ww/view/za/10806097
Veuillez tenir compte des avertissements et informations supplémentaires de la notice de
service dans votre langue sur Internet:
http://support.automation.siemens.com/ww/view/be/10806097
http://support.automation.siemens.com/ww/view/ch/10806097
http://support.automation.siemens.com/ww/view/fr/10806097
http://support.automation.siemens.com/ww/view/lu/10806097
Si prega di tenere conto delle avvertenze e ulteriori informazioni nell’istruzione operativa
compatta nella relativa lingua in Internet:
http://support.automation.siemens.com/ww/view/it/10806097
Se ruega tener en cuenta las advertencias y las informaciones complementarias contenidas
en las instrucciones de servicio (resumen) en español en Internet:
http://support.automation.siemens.com/ww/view/cl/10806097
http://support.automation.siemens.com/ww/view/es/10806097
Dbejte prosím na výstražné pokyny a doplňkové informace v kompaktním návodu k obsluze
ve vašem jazyce na internetu:
http://support.automation.siemens.com/ww/view/cz/10806097
Vær venligst opmærksom på de advarselsanvisninger og ekstra informationer der findes på
dit sprog i kompaktdriftsvejledningen på internettet:
http://support.automation.siemens.com/ww/view/dk/10806097
Noudata lyhyen käyttöoppaan sisältämiä varoituksia ja huomio sen muutkin tiedot. Oman
kielisesi käyttöoppaan löydät internetistä osoitteesta:
http://support.automation.siemens.com/ww/view/fi/10806097
Λάβετε υπόψη τις υποδείξεις προειδοποίησης και τις πρόσθετες πληροφορίες των
συνοπτικών οδηγιών χρήσης που παρέχονται στη γλώσσα σας στο Διαδίκτυο:
http://support.automation.siemens.com/ww/view/gr/10806097
请注意互联网上精编版操作说明相应语言版本中的警告提示和附加信息：
http://support.automation.siemens.com/ww/view/cn/10806097

Information on the Internet
SCALANCE W788-x / W748-1
6Operating Instructions, 06/2016, A5E03678333-10
http://support.automation.siemens.com/ww/view/hk/10806097
http://support.automation.siemens.com/ww/view/sg/10806097
Kérjük, vegye figyelembe az interneten található, az Ön anyanyelvén íródott kompakt
használati útmutatóban található figyelmeztetéseket és további információkat:
http://support.automation.siemens.com/ww/view/hu/10806097
Skoðið vel viðvaranir og aðrar upplýsingar í notkunarleiðbeiningunum á ykkar tungumáli á
internetinu:
http://support.automation.siemens.com/ww/view/is/10806097
インターネットサイトにある各言語の注意事項および追加情報を参照してください:
http://support.automation.siemens.com/ww/view/jp/10806097
사이트에 있는 귀하의 언어로 된콤팩트 사용 설명서에 명시된 경고 지침 및추가 정보를
준수하십시오:
http://support.automation.siemens.com/ww/view/kr/10806097
http://support.automation.siemens.com/ww/view/kw/10806097
Neem goed nota van de waarschuwingen en extra informatie in de compacte
gebruiksaanwijzing in uw taal op internet:
http://support.automation.siemens.com/ww/view/be/10806097
http://support.automation.siemens.com/ww/view/nl/10806097
Vennligst følg advarslene og annen informasjon i den kompakte bruksanvisningen, som du
finner på ditt språk på internett:
http://support.automation.siemens.com/ww/view/no/10806097
Proszę zwrócić uwagę na ostrzeżenia oraz dodatkowe informacje w kompaktowej instrukcji
obsługi, dostępnej w odpowiednim języku w internecie:
http://support.automation.siemens.com/ww/view/po/10806097
Observera varningshänvisningarna och extrainformationerna i kompaktbruksanvisningen
som finns på ditt språk på internet:
http://support.automation.siemens.com/ww/view/se/10806097
İnternette kendi dilinizdeki kompakt işletim kılavuzunda yer alan uyarı notlarına ve ek
bilgilere lütfen dikkat edin:
http://support.automation.siemens.com/ww/view/tr/10806097

SCALANCE W788-x / W748-1
Operating Instructions, 06/2016, A5E03678333-10 7
Introduction
2
2.1
Information on the Operating Instructions
Validity of the Operating Instructions
These operating instructions cover the following products:
Article no. of the RoW version
Article no. of the US version
Access points
SCALANCE W788-1 RJ-45
6GK5788-1FC00-0AA0
6GK5788-1FC00-0AB0
SCALANCE W788-1 M12 6GK5788-1GD00-0AA0 6GK5788-1GD00-0AB0
Dual access points
SCALANCE W788-2 RJ-45
6GK5788-2FC00-0AA0
6GK5788-2FC00-0AB0
SCALANCE W788-2 M12
6GK5788-2GD00-0AA0
6GK5788-2GD00-0AB0
SCALANCE W788-2 M12 EEC
6GK5788-2GD00-0TA0
6GK5788-2GD00-0TB0
Ethernet client modules
SCALANCE W748-1 RJ-45
6GK5748-1FC00-0AA0
6GK5748-1FC00-0AB0
SCALANCE W748-1 M12
6GK5748-1GD00-0AA0
6GK5748-1GD00-0AB0
If information relates to all the named products, the term SCALANCE W7x8 will be used.
These operating instructions apply to the following software version:
●SCALANCE W7x8 with firmware as of version 6.00
Purpose of the Operating Instructions
Using the Operating Instructions, you will be able to install and connect the SCALANCE
W7x8 correctly. The configuration and the integration of the device in a WLAN are not
described in these instructions.
Documentation on the accompanying CD
You will find detailed information about configuration in the SCALANCE W700 configuration
manuals on the accompanying SIMATIC NET IWLAN CD under the file name:
PH_SCALANCE-W700-WBM_76.pdf and PH_SCALANCE-W700-CLI_76.pdf
Note
Make sure that you read the explanations and instructions in the README.txt file

Introduction
2.2 Structure of the type designations
SCALANCE W788-x / W748-1
8Operating Instructions, 06/2016, A5E03678333-10
2.2
Structure of the type designations
The type designation of a SCALANCE W7x8 is made up of several parts that have the
following meaning:
Security information
Siemens provides products and solutions with industrial security functions that support the
secure operation of plants, systems, machines and networks.
In order to protect plants, systems, machines and networks against cyber threats, it is
necessary to implement – and continuously maintain – a holistic, state-of-the-art industrial
security concept. Siemens’ products and solutions only form one element of such a concept.
Customer is responsible to prevent unauthorized access to its plants, systems, machines
and networks. Systems, machines and components should only be connected to the
enterprise network or the internet if and to the extent necessary and with appropriate security
measures (e.g. use of firewalls and network segmentation) in place.
Additionally, Siemens’ guidance on appropriate security measures should be taken into
account. For more information about industrial security, please visit
(http://www.siemens.com/industrialsecurity).
Siemens’ products and solutions undergo continuous development to make them more
secure. Siemens strongly recommends to apply product updates as soon as available and to
always use the latest product versions. Use of product versions that are no longer supported,
and failure to apply latest updates may increase customer’s exposure to cyber threats.
To stay informed about product updates, subscribe to the Siemens Industrial Security RSS
Feed under (http://www.siemens.com/industrialsecurity).

SCALANCE W788-x / W748-1
Operating Instructions, 06/2016, A5E03678333-10 9
Security recommendations
3
To prevent unauthorized access, note the following security recommendations.
General
●You should make regular checks to make sure that the device meets these
recommendations and/or other security guidelines.
●Evaluate your plant as a whole in terms of security. Use a cell protection concept with
suitable products.
●When confidential zones are used, the internal and external network are disconnected, an
attacker cannot access the data from the outside.
●Operate the device only within a protected network area.
●Use additional devices with VPN functionality (e.g. SCALANCE S) to encrypt and
authenticate communication from and to the devices.
●For data transfer via a non-secure network, use an encrypted VPN tunnel (IPsec) by
using additional devices with VPN functionality (e.g. SCALANCE S).
●For operation of the device in a non-secure infrastructure no product liability will be
accepted.
●Separate connections correctly (WBM. Telnet, SSH etc.).
Physical access
●Restrict physical access to the device to qualified personnel.
●The memory card or the PLUG (C-PLUG, KEY-PLUG, security PLUG) contains sensitive
data such as certificates, keys etc. that can be read out and modified.
Software (security functions)
●Keep the software up to date. Check regularly for security updates of the product.
You will find information on this on the Internet pages "Industrial Security
(http://www.siemens.com/industrialsecurity) "
●Inform yourself regularly about security advisories and bulletins published by Siemens
ProductCERT.
●Only activate protocols that you really require to use the device.
●Use the security functions such as address translation with NAT (Network Address
Translation) or NAPT (Network Address Port Translation) to protect receiving ports from
access by third parties.
●Restrict access to the device with a firewall or rules in an access control list (ACL -
Access Control List).

Security recommendations
SCALANCE W788-x / W748-1
10 Operating Instructions, 06/2016, A5E03678333-10
●If RADIUS authentication is via remote access, make sure that the communication is
within the secured network area or is via a secure channel.
●The option of VLAN structuring provides good protection against DoS attacks and
unauthorized access. Check whether this is practical or useful in your environment.
●Enable logging functions. Use the central logging function to log changes and access
attempts centrally. Check the logging information regularly.
●Configure a Syslog server to forward all logs to a central location.
●Use WPA2/ WPA2-PSK with AES to protect the WLAN. If iPCF or iPCF-MC is used, use
the AES encryption.
Passwords
●Define rules for the use of devices and assignment of passwords.
●Regularly update passwords and keys to increase security.
●Change all default passwords for users before you operate the device.
●Only use passwords with a high password strength. Avoid weak passwords for example
password1, 123456789, abcdefgh.
●Make sure that all passwords are protected and inaccessible to unauthorized personnel.
●Do not use the same password for different users and systems or after it has expired.
Keys and certificates
This section deals with the security keys and certificates you require to set up HTTPS (
HyperText Transfer Protocol Secured Socket Layer).
●We strongly recommend that you create your own HTTPS certificates and make them
available.
There are preset certificates and keys on the device. The preset and automatically
created HTTPS certificates are self-signed.
We recommend that you use HTTPS certificates signed either by a reliable external or by
an internal certification authority. The HTTPS certificate checks the identity of the device
and controls the encrypted data exchange. You can install the HTTPS certificate via the
WBM (System > Load and Save).
●Handle user-defined private keys with great caution if you use user-defined SSH or SSL
keys.
●Use the certification authority including key revocation and management to sign the
certificates.
●Verify certificates and fingerprints on the server and client to avoid "man in the middle"
attacks.
●We recommend that you use certificates with a key length of 2048 bits.
●Change keys and certificates immediately, if there is a suspicion of compromise.