Siemens SIMATIC NET SCALANCE W786C Series User manual

SCALANCE W786C
SIMATIC NET
Industrial Wireless LAN
SCALANCE W786C
Operating Instructions
07/2019
A5E03692138
-12
Introduction
1
Security recommendations
2
Description
3
Mounting
4
Connection
5
Technical data
6
Dimension drawing
SCALANCE W786
7
Approvals
8

Siemens AG
Digital Industries
Postfach 48 48
90026
NÜRNBERG
GERMANY
A5E03692138-12
Ⓟ
07/2019 Subject to change
Copyright © Siemens AG 2012 - 2019.
All rights reserved
Legal information
Warning notice system
This manual contains notices you have to observe in order to ensure your personal safety, as well as to prevent
damage to property. The notices referring to your personal safety are highlighted in the manual by a safety alert
symbol, notices referring only to property damage have no safety alert symbol. These notices shown below are
graded according to the degree of danger.
DANGER
indicates that death or severe personal injury will result if proper precautions are not taken.
WARNING
indicates that death or severe personal injury may result if proper precautions are not taken.
CAUTION
indicates that minor personal injury can result if proper precautions are not taken.
NOTICE
indicates that property damage can result if proper precautions are not taken.
If more than one degree of danger is present, the warning notice representing the highest degree of danger will
be used. A notice warning of injury to persons with a safety alert symbol may also include a warning relating to
property damage.
Qualified Personnel
The product/system described in this documentation may be operated only by personnel qualified for the specific
task in accordance with the relevant documentation, in particular its warning notices and safety instructions.
Qualified personnel are those who, based on their training and experience, are capable of identifying risks and
avoiding potential hazards when working with these products/systems.
Proper use of Siemens products
Note the following:
WARNING
Siemens products may only be used for the applications described in the catalog and in the relevant technical
documentation. If products and components from other manufacturers are used, these must be recommended
or approved by Siemens. Proper transport, storage, installation, assembly, commissioning, operation and
maintenance are required to ensure that the products operate safely and without any problems. The permissible
ambient conditions must be complied with. The information in the relevant documentation must be observed.
Trademarks
All names identified by ® are registered trademarks of Siemens AG. The remaining trademarks in this publication
may be trademarks whose use by third parties for their own purposes could violate the rights of the owner.
Disclaimer of Liability
We have reviewed the contents of this publication to ensure consistency with the hardware and software
described. Since variance cannot be precluded entirely, we cannot guarantee full consistency. However, the
information in this publication is reviewed regularly and any necessary corrections are included in subsequent
editions.

SCALANCE W786C
Operating Instructions, 07/2019, A5E03692138-12 3
Table of contents
1 Introduction............................................................................................................................................. 5
1.1 Information on the Operating Instructions ................................................................................5
2 Security recommendations...................................................................................................................... 7
3 Description............................................................................................................................................ 13
3.1 Description of the device ........................................................................................................13
3.2 Structure of the type designations ..........................................................................................14
3.3 Scope of delivery ....................................................................................................................15
3.4 Accessories.............................................................................................................................16
3.4.1 Flexible connecting cables and antennas...............................................................................17
3.4.1.1 Flexible connecting cables......................................................................................................17
3.4.1.2 Antennas .................................................................................................................................18
3.5 LED display.............................................................................................................................21
3.6 Reset button............................................................................................................................22
4 Mounting............................................................................................................................................... 23
4.1 Safety notes relating to installation .........................................................................................23
4.2 Removing / fitting the housing cover.......................................................................................24
4.3 Laying the cables ....................................................................................................................26
4.4 Mounting without an adapter (wall mounting only) .................................................................28
4.5 Installation with mounting plate...............................................................................................31
4.5.1 Fitting the mounting plate to a wall .........................................................................................31
4.5.2 Screwing the cover plate for the cable feedthrough to the mounting plate ............................33
4.5.3 Fitting the mounting plate to an S7-300 standard rail.............................................................34
4.5.4 Fitting the mounting plate to a DIN rail ...................................................................................35
4.5.5 Fitting the mounting plate to a mast........................................................................................36
4.5.6 Fitting/removing the SCALANCE W786 to/from a mounting plate .........................................37
5 Connection ........................................................................................................................................... 39
5.1 General safety instructions for the SCALANCE W786C ........................................................39
5.2 Lightning protection, power supply and grounding .................................................................40
5.3 Suitable cables for power supply and Ethernet ......................................................................44
5.4 Connecting the cables ............................................................................................................46
5.5 Connecting the power supply .................................................................................................49
5.6 Connecting a power supply adapter .......................................................................................52
5.7 Connecting to Industrial Ethernet ...........................................................................................56
5.8 SFP/SFP+ transceivers ..........................................................................................................57

Table of contents
SCALANCE W786C
4Operating Instructions, 07/2019, A5E03692138-12
5.9 Connecting external antennas ............................................................................................... 59
6 Technical data ...................................................................................................................................... 61
6.1 Technical specifications (SCALANCE W786C-2).................................................................. 61
6.2 Radiation patterns diagrams of SCALANCE W786 internal antennas .................................. 64
7 Dimension drawing SCALANCE W786.................................................................................................. 67
8 Approvals ............................................................................................................................................. 69
Index .................................................................................................................................................... 71

SCALANCE W786C
Operating Instructions, 07/2019, A5E03692138-12 5
Introduction
1
1.1 Information on the Operating Instructions
Validity of the Operating Instructions
These operating instructions cover the following products:
Product
Article number
SCALANCE W786C-2 RJ-45
6GK5786-2FC00-1AA0
SCALANCE W786C-2IA RJ-45
6GK5786-2HC00-1AA0
SCALANCE W786C-2 SFP 6GK5786-2FE00-1AA0
If information relates to all the named products, the term SCALANCE W786 will be used.
These operating instructions apply to the following software version:
●SCALANCE W786C with firmware as of version 8.31
Operating instructions
Based on the operating instructions, you will be able to install and connect up the
SCALANCE W786 correctly. Configuring the SCALANCE W786 and integration in a WLAN
are not dealt with in this manual.
Documentation on the accompanying CD
You will find introductory information about configuration in the document "Getting Started
SCALANCE WLC711" on the accompanying SIMATIC NET IWLAN CD under the file name:
GS_SCALANCE-WLC711_76.pdf
Note
Mak
e sure that you read the explanations and instructions in the README.txt file

Introduction
1.1 Information on the Operating Instructions
SCALANCE W786C
6Operating Instructions, 07/2019, A5E03692138-12
Security information
Siemens provides products and solutions with industrial security functions that support the
secure operation of plants, systems, machines and networks.
In order to protect plants, systems, machines and networks against cyber threats, it is
necessary to implement – and continuously maintain – a holistic, state-of-the-art industrial
security concept. Siemens’ products and solutions constitute one element of such a concept.
Customers are responsible for preventing unauthorized access to their plants, systems,
machines and networks. Such systems, machines and components should only be
connected to an enterprise network or the internet if and to the extent such a connection is
necessary and only when appropriate security measures (e.g. firewalls and/or network
segmentation) are in place.
For additional information on industrial security measures that may be implemented, please
visit (https://www.siemens.com/industrialsecurity)
Siemens’ products and solutions undergo continuous development to make them more
secure. Siemens strongly recommends that product updates are applied as soon as they are
available and that the latest product versions are used. Use of product versions that are no
longer supported, and failure to apply the latest updates may increase customers’ exposure
to cyber threats.
To stay informed about product updates, subscribe to the Siemens Industrial Security RSS
Feed under (https://www.siemens.com/industrialsecurity)
Recycling and disposal
The products are low in pollutants, can be recycled and meet the requirements of the WEEE
directive 2012/19/EU for the disposal of electrical and electronic equipment.
Do not dispose of the products at public disposal sites.
For environmentally friendly recycling and the disposal of your old device contact a certified
disposal company for electronic scrap or your Siemens contact (Product return
(https://support.industry.siemens.com/cs/ww/en/view/109479891)).
Note the different national regulations.
Trademarks
The following and possibly other names not identified by the registered trademark sign ®are
registered trademarks of Siemens AG:
SIMATIC NET, SCALANCE, C-PLUG, RCoax

SCALANCE W786C
Operating Instructions, 07/2019, A5E03692138-12 7
Security recommendations
2
To prevent unauthorized access, note the following security recommendations.
General
●You should make regular checks to make sure that the device meets these
recommendations and/or other security guidelines.
●Evaluate your plant as a whole in terms of security. Use a cell protection concept with
suitable products (https://www.industry.siemens.com/topics/global/en/industrial-
security/pages/default.aspx).
●When the internal and external network are disconnected, an attacker cannot access
internal data from the outside. Therefore operate the device only within a protected
network area.
●For communication via non-secure networks use additional devices with VPN functionality
to encrypt and authenticate the communication.
●Terminate management connections correctly (WBM. Telnet, SSH etc.).
Physical access
●Restrict physical access to the device to qualified personnel.
●The memory card or the PLUG (C-PLUG, KEY-PLUG, security PLUG) contains sensitive
data such as certificates, keys etc. that can be read out and modified.
Software (security functions)
●Keep the firmware up to date. Check regularly for security updates of the product.
You will find information on this on the Internet pages "Industrial Security
(https://www.siemens.com/industrialsecurity)".
●Inform yourself regularly about security advisories and bulletins published by Siemens
ProductCERT (https://www.siemens.com/cert/en/cert-security-advisories.htm).
●Only activate protocols that you really require to use the device.
●Use the security functions such as address translation with NAT (Network Address
Translation) or NAPT (Network Address Port Translation) to protect receiving ports from
access by third parties.
●Restrict access to the device with a firewall or rules in an access control list (ACL -
Access Control List).
●If RADIUS authentication is via remote access, make sure that the communication is
within the secured network area or is via a secure channel.
●The option of VLAN structuring provides good protection against DoS attacks and
unauthorized access. Check whether this is practical or useful in your environment.

Security recommendations
SCALANCE W786C
8Operating Instructions, 07/2019, A5E03692138-12
●Use a central logging server to log changes and access operations. Operate your logging
server within the protected network area and check the logging information regularly.
●Use WPA2/ WPA2-PSK with AES to protect the WLAN. If iPCF or iPCF-MC is used, use
the AES encryption.
Passwords
●Define rules for the use of devices and assignment of passwords.
●Regularly update passwords and keys to increase security.
●Change all default passwords for users before you operate the device.
●Only use passwords with a high password strength. Avoid weak passwords for example
password1, 123456789, abcdefgh.
●Make sure that all passwords are protected and inaccessible to unauthorized personnel.
●Do not use the same password for different users and systems or after it has expired.
Keys and certificates
This section deals with the security keys and certificates you require to set up HTTPS
(HyperText Transfer Protocol Secured Socket Layer).
●We strongly recommend that you create your own HTTPS certificates and make them
available.
There are preset certificates and keys on the device. The preset and automatically
created HTTPS certificates are self-signed.
We recommend that you use HTTPS certificates signed either by a reliable external or by
an internal certification authority. The HTTPS certificate checks the identity of the device
and controls the encrypted data exchange. You can install the HTTPS certificate via the
WBM (System > Load and Save).
●Handle user-defined private keys with great caution if you use user-defined SSH or SSL
keys.
●Use the certification authority including key revocation and management to sign the
certificates.
●Verify certificates and fingerprints on the server and client to avoid "man in the middle"
attacks.
●We recommend that you use certificates with a key length of 2048 bits.
●Change keys and certificates immediately, if there is a suspicion of compromise.

Security recommendations
SCALANCE W786C
Operating Instructions, 07/2019, A5E03692138-12 9
Secure/non-secure protocols and services
●Avoid and disable non-secure protocols, for example Telnet and TFTP. For historical
reasons, these protocols are still available, however not intended for secure applications.
Use non-secure protocols on the device with caution.
●Check whether use of the following protocols and services is necessary:
–Non-authenticated and unencrypted ports
–LLDP
–Syslog
–DHCP options 66/67
–TFTP
●The following protocols provide secure alternatives:
–SNMPv1/v2 →SNMPv3
Check whether use of SNMPv1 is necessary. SNMPv1 is classified as non-secure.
Use the option of preventing write access. The product provides you with suitable
setting options.
If SNMP is enabled, change the community names. If no unrestricted access is
necessary, restrict access with SNMP.
Use SNMPv3 in conjunction with passwords.
–HTTP →HTTPS
–Telnet →SSH
●Use secure protocols when access to the device is not prevented by physical protection
measures.
●To prevent unauthorized access to the device or network, take suitable protective
measures against non-secure protocols.
●If you require non-secure protocols and services, operate the device only within a
protected network area.
●Restrict the services and protocols available to the outside to a minimum.
●For the DCP function, enable the "Read Only" mode after commissioning.

Security recommendations
SCALANCE W786C
10 Operating Instructions, 07/2019, A5E03692138-12
Available protocols
The following list provides you with an overview of the open protocol ports.
The table includes the following columns:
●Protocol
●Port
●Port status
–Open
The port is always open and cannot be closed.
–Open (when configured)
The port is open if it has been configured.
●Factory setting
–Open
The factory setting of the port is "Open".
–Closed
The factory setting of the port is "Closed".
●Authentication
Specifies whether or not the protocol is authenticated.
●Encryption
Specifies whether or not the transfer is encrypted.
Protocol
Port number
Port status
Factory setting of
the port
Authentication
SSH
TCP/22 Open
(when configured)
Open Yes
TELNET
TCP/23 Open
(when configured)
Open Yes
HTTP
TCP/80 Open
(when configured)
Open Yes
HTTPS
TCP/443 Open
(when configured)
Open Yes
SNTP
NTP
UDP/123 Open
(when configured)
Closed No
SNMP
UDP/161 Open
(when configured)
Open Yes
PROFINET
UDP/34964,
UDP/49154, 49155
Open Open No
Syslog
UDP/514 Open
(when configured)
Open No
EtherNet/IP
TCP/44818,
UDP/2222,44818
Open
(when configured)
Open No

Security recommendations
SCALANCE W786C
Operating Instructions, 07/2019, A5E03692138-12 11
Protocol
Port number
Port status
Factory setting of
the port
Authentication
DHCP
UDP/67,68 Open
(when configured)
Closed No
RADIUS
UDP/1812,1813 Open
(when configured)
Closed No
TFTP
UDP/69 Open
(when configured)
Closed No

Security recommendations
SCALANCE W786C
12 Operating Instructions, 07/2019, A5E03692138-12

SCALANCE W786C
Operating Instructions, 07/2019, A5E03692138-12 13
Description
3
3.1 Description of the device
SCALANCE W786C - IP65 degree of protection
①
Connector for power supply / feed-in adaptor
②
Connector for Ethernet, RJ-45 type
③
LEDs
④
Antenna connectors R1A1, R1A2, R1A3
Devices with one IWLAN interface: 3 connectors.
⑤
Antenna connectors R2A1, R2A2, R2A3
Devices with two IWLAN interfaces: 6 connectors
⑥
Reset button
⑦
Cable feedthrough
⑧
Grounding connector thread M4 (on the back of the device)
⑨
PLUG compartment (not with W786C)
Figure 3-1 SCALANCE W786C

Description
3.2 Structure of the type designations
SCALANCE W786C
14 Operating Instructions, 07/2019, A5E03692138-12
3.2 Structure of the type designations
The type designation of a SCALANCE W786 is made up of several parts that have the
following meaning:

Description
3.3 Scope of delivery
SCALANCE W786C
Operating Instructions, 07/2019, A5E03692138-12 15
3.3 Scope of delivery
The following components are supplied with the SCALANCE W786:
●SCALANCE W786
●5 caps for the cover screws
●Depending on the version, up to 8 plugs for sealing the housing
●Depending on the version, up to 8 strain relief clamps
●2-pin terminal block for the 24 VDC power supply
●SIMATIC NET Industrial Wireless LAN CD
Note
The mounting set with the holding plate does not ship
with the device, see Accessories.
Please check that the consignment you have received is complete. If the consignment is
incomplete, contact your supplier or your local Siemens office.

Description
3.4 Accessories
SCALANCE W786C
16 Operating Instructions, 07/2019, A5E03692138-12
3.4 Accessories
Technical data subject to change.
You will find further information on the range of accessories in the Industry Mall
(https://mall.industry.siemens.com)
Mounting set
Component
Description
Article number
Mounting set Mounting set can only be used in conjunction with
SCALANCE W-786; consisting of holding plate for wall
mounting, for mounting on an S7-300 rail and a DIN
rail and for mast mounting with additional hose clips
6GK5798-8MG00-0AA0
Cables Industrial Ethernet
Component
Description
Article number
IE FC TP cable
4 x 2
Industrial Ethernet FastConnect TP standard cable GP
4 x 2, TP installation cable CAT6A for connection to IE
FC RJ45 Plug 4 x 2, 24 AWG
Sold by the meter
6XV1878-2A
* Available in different lengths
Lightning protection
Component
Description
Article number
LP798-1N Lighting protector with N/N female/female connector
with gas discharge technology
6GK5798-2LP00-2AA6
LP798-2N Lighting protector with N/N female/female connector
with quarter wave technology
6GK5798-2LP10-2AA6
Terminating resistor
Component
Description
Article number
TI795-1R Electrical connection
RSMA-Connect, male
6GK5795-1TR10-0AA6

Description
3.4 Accessories
SCALANCE W786C
Operating Instructions, 07/2019, A5E03692138-12 17
3.4.1 Flexible connecting cables and antennas
3.4.1.1 Flexible connecting cables
Flexible connecting cable N-Connect/R-SMA
Flexible connecting cable for connecting an antenna to a SCALANCE W device with R-SMA
connectors, preassembled with a connector N-male and R-SMA male
Length
Article number
0.3 m
6XV1875-5CE30
1 m
6XV1875-5CH10
2 m
6XV1875-5CH20
5 m 6XV1875-5CH50
10 m
6XV1875-5CN10
For railway applications, the following connecting cable are available:
Length
Article number
1 m
6XV1875-5TH10
2 m
6XV1875-5TH20
5 m
6XV1875-5TH50
Flexible connecting cable N-Connect/N-Connect
Flexible connecting cable for connecting an antenna to a SCALANCE W device with N-
Connect connectors.
Preassembled with two N male connectors:
Length
Article number
1 m
6XV1875-5AH10
2 m
6XV1875-5AH20
5 m
6XV1875-5AH50
10 m
6XV1875-5AN10
For railway applications, the following connecting cable are available:
Length
Article number
1 m
6XV1875-5SH10
2 m
6XV1875-5SH20
5 m
6XV1875-5SH50

Description
3.4 Accessories
SCALANCE W786C
18 Operating Instructions, 07/2019, A5E03692138-12
Flexible connecting cable IWLAN QMA/N-Connect male/female
Adapter cable for connecting a MIMO antenna with QMA connectors with the flexible
connecting cables. Preassembled with two connectors QMA male and N-Connect female.
pack of 3
Length
Article number
1 m
6XV1875-5JH10
For railway applications, the following connecting cable is available Note: Scope of delivery:
Pack of 1
Length
Article number
1 m
6XV1875-5VH10
3.4.1.2 Antennas
Note
When you select an antenna, keep in mind the national approvals for your device.
You can find additional information under Wireless approva
ls
(
https://www.siemens.com/wireless-approvals)
The SCALANCE W786C-2IA RJ-45 uses internal omni antennas (3/4 dBi at 2.4 GHz or 5
GHz).
Type
Properties
Article number
ANT792-4DN RCoax helical antenna, circular polarization,
4 dBi, 2.4 GHz, N-Connect female.
6GK5792-4DN00-0AA6
ANT792-6MN Omni antenna, mast/wall mounting, 6 dBi
2.4 GHz, N-Connect female
6GK5792-6MN00-0AA6
ANT792-8DN Directional antenna, mast/wall mounting, 14
dBi 2.4 GHz, N-Connect female
6GK5792-8DN00-0AA6
ANT793-6DG Wide angle antenna, mast/wall mounting, 9
dBi 5 GHz, 2 x N-Connect female
6GK5793-6DG00-0AA0
ANT793-6MN Omni antenna, mast/wall mounting, 5 dBi 5
GHz, N-Connect female
6GK5793-6MN00-0AA6
ANT793-8DJ Directional antenna, mast/wall mounting, 18
dBi 5 GHz, 2 x N-Connect female
6GK5793-8DJ00-0AA0
ANT793-8DK Directional antenna, mast/wall mounting, 23
dBi 5 GHz, 2 x N-Connect female
6GK5793-8DK00-0AA0
ANT793-8DQ Circular polarized antenna, mast mounting,
18 dBi, 5.8 GHz, 1 x N-Connector female
6GK5793-8DQ00-0AA0
ANT795-4MA Omni antenna, directly on the device, 3/5
dBi 2.4 GHz and 5 GHz, IP30, R-SMA con-
nector male for direct installation on the
device, angle connector adjustable 0° to
180°.
6GK5795-4MA00-0AA3

Description
3.4 Accessories
SCALANCE W786C
Operating Instructions, 07/2019, A5E03692138-12 19
Type
Properties
Article number
ANT795-4MC Omnidirectional antenna, 3/5 dBi, 2.4 GHz
and 5 GHz, IP65, N-Connect male for direct
installation on the device, straight connector.
6GK5795-4MC00-0AA3
ANT795-4MD Omnidirectional antenna, 3/5 dBi, 2.4 GHz
and 5 GHz, IP65, N-Connect male for direct
installation on the device, 90° connector.
6GK5795-4MD00-0AA3
ANT795-6DC Wide angle antenna, mast/wall mounting, 9
dBi 2.4 GHz and 5 GHz, N-Connect female
6GK5795-6DC00-0AA0
ANT795-4MB Omnidirectional antenna, 2/3 dBi 2.4 GHz
and 5 GHz, IP30, R-SMA connector female
for direct mounting on the device, angle
connector adjustable 0° to 90°.
6GK5795-4MB00-0Ax0
ANT795-6MN Omni antenna, mounted on roof/vehicle, 6/8
dBi 2.4 GHz and 5 GHz, N-Connect female
6GK5795-6MN10-0AA6
ANT795-6MT Omni antenna (MIMO), mounted on
roof/vehicle/ceiling, 5/7 dBi 2.4 GHz and 5
GHz, 3 x QMA connector female
6GK5795-6MT00-0AA0
ANT793-8DL Directional antenna vertical-horizontal polar-
ized, 5 GHz, 14dBi, IP66, 2xN-Connect
female
6GK5793-8DL00-0AA0
ANT793-8DP Directional antenna, mast/wall mounting, 13
/ 13.5 dBi 4.9 GHz and 5 GHz, N-Connect
female
6GK5793-8DP00-0AA0
ANT795-4MX Omnidirectional antenna, 2/2.5 dBi, 2.4 GHz
and 5 GHz, IP69K, N-Connect male
6GK5795-4MX00-0AA0
ANT795-6MP Omnidirectional antenna, 5/7 dBi, 2.4 GHz
and 5 GHz, IP65/67, N-Connect female
6GK5795-6MP00-0AA0
ANT896-6MM Omnidirectional antenna for mobile wireless,
WLAN and GPS, WLAN: 6/7 dBi, 2.4 GHz
and 5 GHz, IP68, IP69 K, QMA-Connect
female, port 2
6GK5896-6MM00-0AA0
IWLAN RCoax Cable
2,4 GHz PE 1/2"
Omni antenna, 0 dBi 2.400 - 2.485 GHz, N-
Connect female
6XV1875-2A
IWLAN RCoax Cable
5 GHz PE 1/2"
Omni antenna, 0 dBi 5.150 – 5.875 GHz, N-
Connect female
6XV1875-2D
NOTICE
ANT795-4MA
The ANT795-4MA antenna has degree of protection IP30 and is therefore only suitable for
dry environments.

Description
3.4 Accessories
SCALANCE W786C
20 Operating Instructions, 07/2019, A5E03692138-12
Note
ANT793-8DJ
The antenna ANT793
-8DJ may only be used with the flexible connecting cable 6XV1875-
5CH50 (5 m length) or 6XV1875
-5CN10 (10 m length). Other flexible connecting cables are
not permitted.
Notice for USA/Canada
Only one antenna per device can be used (connect
ed to R1A1, R1A2 or R2A1, R2A2).
Note
ANT793-8DK
The antenna ANT793
-8DK may only be used with the flexible connecting cable 6XV1875-
5CN10 (10 m length). Other flexible connecting cables are not permitted.
Notice for USA/Canada
Only one antenna per device can be used (con
nected to R1A1, R1A2 or R2A1, R2A2).