Siemens SCALANCE XM-400 User manual

Configuring the
Virtual Router
Redundancy Protocol
(VRRP)
SCALANCE XM-400, SCALANCE XR-500, SCALANCE S
https://support.industry.siemens.com/cs/ww/en/view/109798556
Siemens
Industry
Online
Support

Legal information
VRRP
Entry-ID: 109798556, V1.0, 09/2021
2
©Siemens AG 2021 All rights reserved
Legal information
Use of application examples
Application examples illustrate the solution of automation tasks through an interaction of several
components in the form of text, graphics and/or software modules. The application examples are
a free service by Siemens AG and/or a subsidiary of Siemens AG ("Siemens"). They are
non-binding and make no claim to completeness or functionality regarding configuration and
equipment. The application examples merely offer help with typical tasks; they do not constitute
customer-specific solutions. You yourself are responsible for the proper and safe operation of the
products in accordance with applicable regulations and must also check the function of the
respective application example and customize it for your system.
Siemens grants you the non-exclusive, non-sublicensable and non-transferable right to have the
application examples used by technically trained personnel. Any change to the application
examples is your responsibility. Sharing the application examples with third parties or copying the
application examples or excerpts thereof is permitted only in combination with your own products.
The application examples are not required to undergo the customary tests and quality inspections
of a chargeable product; they may have functional and performance defects as well as errors. It is
your responsibility to use them in such a manner that any malfunctions that may occur do not
result in property damage or injury to persons.
Disclaimer of liability
Siemens shall not assume any liability, for any legal reason whatsoever, including, without
limitation, liability for the usability, availability, completeness and freedom from defects of the
application examples as well as for related information, configuration and performance data and
any damage caused thereby. This shall not apply in cases of mandatory liability, for example
under the German Product Liability Act, or in cases of intent, gross negligence, or culpable loss of
life, bodily injury or damage to health, non-compliance with a guarantee, fraudulent
non-disclosure of a defect, or culpable breach of material contractual obligations. Claims for
damages arising from a breach of material contractual obligations shall however be limited to the
foreseeable damage typical of the type of agreement, unless liability arises from intent or gross
negligence or is based on loss of life, bodily injury or damage to health. The foregoing provisions
do not imply any change in the burden of proof to your detriment. You shall indemnify Siemens
against existing or future claims of third parties in this connection except where Siemens is
mandatorily liable.
By using the application examples you acknowledge that Siemens cannot be held liable for any
damage beyond the liability provisions described.
Other information
Siemens reserves the right to make changes to the application examples at any time without
notice. In case of discrepancies between the suggestions in the application examples and other
Siemens publications such as catalogs, the content of the other documentation shall have
precedence.
The Siemens terms of use (https://support.industry.siemens.com) shall also apply.
Security information
Siemens provides products and solutions with Industrial Security functions that support the secure
operation of plants, systems, machines and networks.
In order to protect plants, systems, machines and networks against cyber threats, it is necessary
to implement –and continuously maintain –a holistic, state-of-the-art industrial security concept.
Siemens’ products and solutions constitute one element of such a concept.
Customers are responsible for preventing unauthorized access to their plants, systems, machines
and networks. Such systems, machines and components should only be connected to an
enterprise network or the Internet if and to the extent such a connection is necessary and only
when appropriate security measures (e.g. firewalls and/or network segmentation) are in place.
For additional information on industrial security measures that may be implemented, please visit
https://www.siemens.com/industrialsecurity.
Siemens’ products and solutions undergo continuous development to make them more secure.
Siemens strongly recommends that product updates are applied as soon as they are available
and that the latest product versions are used. Use of product versions that are no longer
supported, and failure to apply the latest updates may increase customer’s exposure to cyber
threats.
To stay informed about product updates, subscribe to the Siemens Industrial Security RSS Feed
at: https://www.siemens.com/industrialsecurity.

Table of contents
VRRP
Entry-ID: 109798556, V1.0, 09/2021
3
©Siemens AG 2021 All rights reserved
Table of contents
Legal information......................................................................................................... 2
1Introduction........................................................................................................ 5
1.1 Overview............................................................................................... 5
1.2 Principle of operation............................................................................ 6
1.3 Components used ................................................................................ 8
2Hardware setup................................................................................................ 11
3Engineering VRRP........................................................................................... 13
3.1 Commissioning PC and server........................................................... 13
3.2 Commissioning SCALANCE .............................................................. 17
3.3 Configuring the master router ............................................................ 24
3.3.1 Disable Spanning Tree Protocol ........................................................ 24
3.3.2 Create VLANs .................................................................................... 25
3.3.3 Activate routing................................................................................... 27
3.3.4 Create subnets................................................................................... 28
3.3.5 Configure VRRP................................................................................. 30
Creating the virtual router instance .................................................... 30
Configuring the router instance.......................................................... 30
Configuring the addresses ................................................................. 32
3.4 Configuring the backup router............................................................ 34
3.4.1 Disable Spanning Tree Protocol ........................................................ 34
3.4.2 Create VLANs .................................................................................... 35
3.4.3 Activate routing................................................................................... 37
3.4.4 Create subnets................................................................................... 38
3.4.5 Configure VRRP................................................................................. 40
Create the virtual router instance....................................................... 40
Configuring the router instance.......................................................... 40
Address configuration......................................................................... 42
3.5 Checking the VRRP status................................................................. 44
4Engineering of firewall redundancy with VRRP ........................................... 45
4.1 Configuring the master router ............................................................ 47
4.2 Configuring the backup router............................................................ 48
5Testing the VRRP scenario............................................................................. 50
5.1 Error scenarios................................................................................... 50
5.2 Diagnostics options ............................................................................ 52
5.3 Error profiles....................................................................................... 53
6Useful information........................................................................................... 54
6.1 Normal operation................................................................................ 54
6.2 Failure of a device or a connection .................................................... 54
6.2.1 Router failure...................................................................................... 54
6.2.2 Failure of a connection cable ............................................................. 55
6.3 Tracking process................................................................................ 56
6.3.1 Interface tracking................................................................................ 56
6.3.2 VRID tracking ..................................................................................... 56
6.3.3 Address monitoring ............................................................................ 56
6.4 Calculating the failure time................................................................. 57
7Appendix .......................................................................................................... 59
7.1 Service and support ........................................................................... 59
7.2 Industry Mall....................................................................................... 60
7.3 Links and literature............................................................................. 60

Table of contents
VRRP
Entry-ID: 109798556, V1.0, 09/2021
4
©Siemens AG 2021 All rights reserved
7.4 Change documentation...................................................................... 60

1 Introduction
VRRP
Entry-ID: 109798556, V1.0, 09/2021
5
©Siemens AG 2021 All rights reserved
1 Introduction
1.1 Overview
You have been tasked with ensuring reliability and operational security between
different subnets. To accomplish this task, you need routers between the network
interfaces.
Problem
The router in the network has a technical error. All servers in subnet B are no
longer reachable. Single points of failure which entail the failure of the entire
system must be avoided.
Figure 1-1
Subnet A
Router 1
PC 1
PC 3
PC 2
Server 3
Server 2
Server 1
Subnet B
Solution
To circumvent single points of failure, routers can be set up redundantly. The
underlying principle is the Virtual Router Redundancy Protocol (VRRP). VRRP
belongs to the first-hop redundancy protocols which are used in critical
infrastructure, such as servers, to ensure their availability. The protocol serves to
improve the availability of gateways in local networks by means of redundant
routers.
Figure 1-2
Subnet A
Router 1
PC 1
PC 3
PC 2
Server 3
Server 2
Server 1
Router 2
Subnet B

1 Introduction
VRRP
Entry-ID: 109798556, V1.0, 09/2021
6
©Siemens AG 2021 All rights reserved
1.2 Principle of operation
The functional principle of the Virtual Router Redundancy Protocol (VRRP) lies in
providing a virtual router as a gateway for the end nodes. Two or more routers are
hidden behind this gateway. One of these routers is active and assumes the role of
the master and thus the routing. All other routers function as backup routers and
check whether the master is still active. If the master is not active, they take over.
Figure 1-3
Subnet A Router 1
PC 1
Server 2
Server 1
Router 2
Subnet B
IP: 192.168.0.100
Subnet mask: 255.255.255.0
Gateway: 192.168.0.1
PC 2
IP: 192.168.0.101
Subnet mask: 255.255.255.0
Gateway: 192.168.0.1
Virtual router
Shared IP:
192.168.0.1
Virtual Router ID
(VRID): 1
Virtual router
Shared IP:
192.168.1.1
Virtual Router ID
(VRID): 2
IP: 192.168.1.100
Subnet mask: 255.255.255.0
Gateway: 192.168.1.1
IP: 192.168.1.101
Subnet mask: 255.255.255.0
Gateway: 192.168.1.1
Master
IP Interface: 192.168.0.2/24 Master
IP Interface: 192.168.1.2/24
Backup
IP Interface: 192.168.0.3/24 Backup
IP Interface: 192.168.1.3/24
Virtual router
The virtual router is defined via a Virtual Router ID (VRID), a defined MAC address,
and one or more IP address(es) that the virtual router "listens to", also known as
Associated IP Addresses. The term "virtual router" is misleading. To be exact, the
router is not entirely virtual, but rather individual IP interfaces. One router can be
the master on one IP interface and the backup on another IP interface.
Virtual Router ID (VRID)
To uniquely assign two or more routers to a group that together represents one
virtual router, a VRID is configured in each device. This is a number from 1 to 255
and must be unique in a subnet. All routers within a group must have the same
VRID configured. VRRP routers that belong to the same VRID exchange
information. Each group can only have one master router.
VRRP MAC address
Like every real router, the virtual router also needs a MAC address to which
Ethernet telegrams from the end nodes can be sent. This MAC address is reserved
for VRRP and is composed of a fixed part plus the VRID (in hexadecimal format):
00-00-5e-00-01-VRID.

1 Introduction
VRRP
Entry-ID: 109798556, V1.0, 09/2021
7
©Siemens AG 2021 All rights reserved
Example:
VRID 10 00-00-5e-00-01-0a
VRID 100 00-00-5e-00-01-64
Common IP (Associated IP Addresses)
Figure 1-3 depicts two routers. Both have an IP interface in the network
192.168.0.0/24. Router 1 has the IP address 192.168.0.2, router 2 has
192.168.0.3. With the help of VRRP, an IP address is defined as the address of the
virtual router. This can be one of the real IP addresses actually in use (here,
192.168.0.2 or 192.168.0.3), but it can also be a third IP address as shown in the
Figure (192.168.0.1). All VRRP routers in a group must have the same Associate
IP Addresses.
Selecting the master
The decision of which router in the VRRP group will be the master is made using
the configured priority, along with the parameter "Preempt lower priority Master", or
"Preempt" for short.
If "Preempt" is set, then the router that has the highest configured priority will
always be the master. If the priority is the same, the router that has the higher IP
address on the corresponding IP interface will become the master. If a new router
with a higher priority is connected to the network, a switchover will occur because
the new router will become the master.
If "Preempt" is not set, the router that sends Advertisements first will be the master.
If a new router with higher priority is connected to the network, there will be no
switchover if "Preempt" is inactive.
Using the configuration parameter "Preempt lower priority Master" it is possible to
set whether the network will define a master router deterministically ("Preempt"
turned on) or whether the number of switchovers should be kept as low as possible
("Preempt" turned off).
Refer to the Useful information chapter for more information on the mechanisms
and principles of VRRP.

1 Introduction
VRRP
Entry-ID: 109798556, V1.0, 09/2021
8
©Siemens AG 2021 All rights reserved
1.3 Components used
SCALANCE XM-400 and XR-500
The devices of the SCALANCE XM-400 series and the devices of the SCALANCE
XR-500 series can be used as routers for automation. They meet all the
requirements for IP routing.
The following routing functions are available on the devices:
•Static routing
•Dynamic routing. The following protocols are supported:
- OSPF / OSPF v3
- VRRP / VRRPv3
- RIP / RIPng
Note
The devices of the SCALANCE XM-400 series and the devices of the
SCALANCE XR-500 series are offered in two variants:
•The Layer 3 function (routing) is ready and integrated in the device.
•The Layer 3 function (routing) can be activated with a KEY-PLUG.
The Layer 3 function is required for this application example.
When choosing your device, please note whether the routing function is already included
in the device or whether you need an additional KEY-PLUG with license.
SCALANCE S
The SCALANCE S series Industrial Security Appliances protect industrial networks
and automation systems by segmenting the network and establishing secure
communications channels.
Only VRRPv3 is available on these devices as a routing function:
This examples uses
•2 SCALANCE XM408-8C (item number 6GK5 408-8GR00-2AM2)
•2 SCALANCE S615 (item number 6GK5 615-0AA00-2AA2).

1 Introduction
VRRP
Entry-ID: 109798556, V1.0, 09/2021
9
©Siemens AG 2021 All rights reserved
This application example was created with the following hardware and software
components:
Table 1-1
Component
Item number
IP address and
subnet mask
Router
Note
SCALANCE
XM408-8C
6GK5 408-
8GR00-2AM2
Vlan 1:
192.168.1.2
255.255.255.0
Vlan 10:
192.168.10.2
255.255.255.0
VLAN 20:
192.168.20.2
255.255.255.0
Associated IP:
VRID 10:
192.168.10.1
255.255.255.0
VRID 20:
192.168.20.1
255.255.255.0
Master
SCALANCE
XM408-8C
6GK5 408-
8GR00-2AM2
Vlan 1:
192.168.1.3
255.255.255.0
Vlan 10:
192.168.10.3
255.255.255.0
VLAN 20:
192.168.20.3
255.255.255.0
Associated IP:
VRID 10:
192.168.10.1
255.255.255.0
VRID 20:
192.168.20.1
255.255.255.0
Backup
PC 1
192.168.10.20
255.255.255.0
192.168.10.1
PC 2
192.168.20.20
255.255.2550
192.168.20.1
SCALANCE
XC206-2SFP
6GK5206-
2BS00-2AC2
192.168.10.10
192.168.10.1
SCALANCE
XC206-2SFP
6GK5206-
2BS00-2AC2
192.168.20.10
192.168.20.1
SCALANCE
XC206-2SFP
6GK5206-
2BS00-2AC2
192.168.20.11
192.168.20.1
SCALANCE
S615
6GK5 615-
0AA00-2AA2
Vlan 1:
192.168.1.2
255.255.255.0
Vlan 10:
192.168.10.2
255.255.255.0
VLAN 20:
192.168.20.2
255.255.255.0
Associated IP:
VRID 10:
192.168.10.1
255.255.255.0
VRID 20:
192.168.20.1
255.255.255.0
This firewall
master is an
alternative to
the XM408
router.

1 Introduction
VRRP
Entry-ID: 109798556, V1.0, 09/2021
10
©Siemens AG 2021 All rights reserved
Component
Item number
IP address and
subnet mask
Router
Note
SCALANCE
S615
6GK5 615-
0AA00-2AA2
Vlan 1:
192.168.1.3
255.255.255.0
Vlan 10:
192.168.10.3
255.255.255.0
VLAN 20:
192.168.20.3
255.255.255.0
Associated IP:
VRID 10:
192.168.10.1
255.255.255.0
VRID 20:
192.168.20.1
255.255.255.0
This firewall
backup is an
alternative to
the XM408
router.
This application example consists of the following components:
Table 1-2
Component
File name
Note
This document
109798556_VRRP_V1_0.en

2 Hardware setup
VRRP
Entry-ID: 109798556, V1.0, 09/2021
11
©Siemens AG 2021 All rights reserved
2 Hardware setup
The aim of the following application example is to establish communication
between 2 PCs. Diagnostics need to be checked with a ping command from PC 1
to PC 2.
The following figures show the physical network structure.
The document explains 2 different hardware configurations:
•Hardware configuration with XM408-8C (no firewall)
•Hardware configuration with S615 (with firewall)
The Figure below shows the hardware setup with the SCALANCE XM408-8C.
Figure 2-1
PC 1
IP address: 192.168.10.20
Subnet mask: 255.255.255.0
Gateway: 192.168.10.1
SCALANCE XC 206
IP address: 192.168.10.10
Subnet mask: 255.255.255.0
Gateway: 192.168.10.1
VLAN10/ subnet –B 192.168.10.0/24
Virtual router
VRRP Instance 10
IP: 192.168.10.1
SCALANCE XM408-8C(Master)
Port 1.1: Interface VLAN 1
Function: Configuration
IP address: 192.168.1.2
Subnet mask: 255.255.255.0
Port 1.3: Interface VLAN 10
Function: Server room
IP address: 192.168.10.2
Subnet mask: 255.255.255.0
Port 1.4: Interface VLAN 20
Function: Cell
IP address: 192.168.20.2
Subnet mask: 255.255.255.0
SCALANCE XM408-8C(Backup)
Port 1.1: Interface VLAN 1
Function: Configuration
IP address: 192.168.1.3
Subnet mask: 255.255.255.0
Port 1.3: Interface VLAN 10
Function: Server room
IP address: 192.168.10.3
Subnet mask: 255.255.255.0
Port 1.4: Interface VLAN 20
Function: Cell
IP address: 192.168.20.3
Subnet mask: 255.255.255.0
Virtual router
VRRP Instance 20
IP: 192.168.20.1
PC 2
IP address: 192.168.20.20
Subnet mask: 255.255.255.0
Gateway: 192.168.20.1
SCALANCE XC 206
IP address: 192.168.20.11
Subnet mask: 255.255.255.0
Gateway: 192.168.20.1
VLAN20/ subnet –A 192.168.20.0/24
SCALANCE XC 206
IP address: 192.168.20.10
Subnet mask: 255.255.255.0
Gateway: 192.168.20.1

2 Hardware setup
VRRP
Entry-ID: 109798556, V1.0, 09/2021
12
©Siemens AG 2021 All rights reserved
The Figure below shoes the hardware setup with the SCALANCE S615.
Figure 2-2
PC 2
IP address: 192.168.20.20
Subnet mask: 255.255.255.0
Gateway: 192.168.20.1
SCALANCE XC 206
IP address: 192.168.20.11
Subnet mask: 255.255.255.0
Gateway: 192.168.20.1
VLAN20/ subnet –B 192.168.20.0/24
SCALANCE S615 (Master)
Port 1.2: Interface VLAN 1
Function: Configuration
IP address: 192.168.1.2
Subnet mask: 255.255.255.0
Port 1.5: Interface VLAN 10
Function: Server room
IP address: 192.168.10.2
Subnet mask: 255.255.255.0
Port 1.4: Interface VLAN 20
Function: Cell
IP address: 192.168.20.2
Subnet mask: 255.255.255.0
SCALANCE S615 (Backup)
Port 1.2: Interface VLAN 1
Function: Configuration
IP address: 192.168.1.3
Subnet mask: 255.255.255.0
Port 1.5: Interface VLAN 10
Function: Server room
IP address: 192.168.10.3
Subnet mask: 255.255.255.0
Port 1.4: Interface VLAN 20
Function: Cell
IP address: 192.168.20.3
Subnet mask: 255.255.255.0
SCALANCE XC 206
IP address: 192.168.20.10
Subnet mask: 255.255.255.0
Gateway: 192.168.20.1
PC 1
IP address: 192.168.10.20
Subnet mask: 255.255.255.0
Gateway: 192.168.10.1
SCALANCE XC 206
IP address: 192.168.10.10
Subnet mask: 255.255.255.0
Gateway: 192.168.10.1
VLAN10/ subnet –B 192.168.10.0/24
VRRP Instance 10
IP: 192.168.10.1
VRRP Instance 20
IP: 192.168.20.1

3 Engineering VRRP
VRRP
Entry-ID: 109798556, V1.0, 09/2021
13
©Siemens AG 2021 All rights reserved
3 Engineering VRRP
3.1 Commissioning PC and server
Description
This application example uses 2 PCs to test IP routing between the networks.
You must enter a default router in all PCs. Only once it has been entered can the
PC communicate with devices that are not in its own subnet.
The IP packets intended for a specific subnet are forwarded by the PC to the
default router for further processing.
Note
In Windows, the default router is referred to as the "default gateway".
Overview of the addresses
The following table provides you with an overview that shows with which IP
addresses and which standard gateways the PCs are configured with.
Table 3-1
PC
IP address
Subnet mask
Gateway
PC 1
192.168.10.20
255.255.255.0
192.168.10.1
PC 2
192.168.20.20
255.255.255.0
192.168.20.1

3 Engineering VRRP
VRRP
Entry-ID: 109798556, V1.0, 09/2021
14
©Siemens AG 2021 All rights reserved
Entering a default router
The following instructions show you how to enter a default router on the PC in
Windows 10 using PC 2 as an example.
Enter the default gateway in the Properties of your network adapter.
Proceed as follows to open the properties of the network adapter:
1. Navigate to "Start > Control Panel > Network and Internet" and click "View
network status and tasks".
The "Network and Sharing Center" opens.
2. Click on "Change adapter settings" which appears in the left-hand sector of the
window.
The "Network Connections" window will open.

3 Engineering VRRP
VRRP
Entry-ID: 109798556, V1.0, 09/2021
15
©Siemens AG 2021 All rights reserved
3. You will see all available network adapters / network cards. With the left mouse
button, select the entry you are using from the list.
4. Right-click to open the context menu and click "Properties". The Properties
window for the corresponding network adapter, network card or connection will
open.
5. Left-click to select the item "Internet protocol Version 4 (TCP/IPv4)".

3 Engineering VRRP
VRRP
Entry-ID: 109798556, V1.0, 09/2021
16
©Siemens AG 2021 All rights reserved
6. Then click the "Properties" button.
The Properties window for Internet protocol version 4 opens. Configure the
properties as follows:
a. Set the option to "Use the following IP address".
b. Enter the "IP address" intended for the PC.
c. Enter the "Subnet mask" intended for the PC.
d. Enter the "Default gateway".
7. Then click the "OK" button.
8. When you have edited the properties, click "OK" in this dialog box and in the
next.
Result
You have entered the IP address and the corresponding standard gateway in all
the PCs. The PCs need these settings to communicate with remote subnets.

3 Engineering VRRP
VRRP
Entry-ID: 109798556, V1.0, 09/2021
17
©Siemens AG 2021 All rights reserved
3.2 Commissioning SCALANCE
Some preparation is necessary before the SCALANCE XM-400 devices can be
configured as a VRRP group.
You must prepare the following points in advance:
•Set up an Engineering PC
•Reset SCALANCE to factory setting (if necessary)
•Assign a management IP address
•Start Web Based Management (WBM)
Setting up an engineering PC
The engineering PC is used to configure the SCALANCE devices using web-based
management.
Assign the following IP address to the engineering PC:

3 Engineering VRRP
VRRP
Entry-ID: 109798556, V1.0, 09/2021
18
©Siemens AG 2021 All rights reserved
To establish a connection with the SCALANCE devices, the engineering PC is
connected with port 1.1 of the respective SCALANCE.
Figure 3-1
VLAN10/ subnet –B 192.168.10.0/24
VLAN20/ subnet –A 192.168.20.0/24
SCALANCE XM408-8C(Master)
Port 1.1: Interface VLAN 1
Function: Configuration
IP address: 192.168.1.2
Subnet mask: 255.255.255.0
SCALANCE XM408-8C(Backup)
Port 1.1: Interface VLAN 1
Function: Configuration
IP address: 192.168.1.3
Subnet mask: 255.255.255.0
SIMATIC Field PG
IP address: 192.168.1.100
Subnet mask: 255.255.255.0
WBM /
SINEC PNI
Resetting SCALANCE
If you are not using brand-new SCALANCE devices, it is recommended to reset
both devices to factory settings.
That way you can be sure that no old configuration is stored in the SCALANCE.
For instructions on how to reset the SCALANCE, refer to the Device manual.

3 Engineering VRRP
VRRP
Entry-ID: 109798556, V1.0, 09/2021
19
©Siemens AG 2021 All rights reserved
Assigning the IP address
The first assignment of an IP address for the SCALANCE cannot be done with
Web Based Management, because this configuration tool requires an IP address in
the first place.
There are several ways to assign an IP address to an unconfigured device:
•SINEC PNI
•PRONETA
•STEP 7
•DHCP
SINEC PNI and PRONETA are available to you for free as downloads in the
Industry Online Support.
Assign the planned IP address to the two SCALANCE routers with one of the
aforementioned tools:
Table 3-2
Device
Function
IP address
Subnet mask
SCALANCE XM408-8C
VRRP master
192.168.1.2
255.255.255.0
SCALANCE XM408-8C
VRRP backup
192.168.1.3
255.255.255.0
Note
VRRPv3 supports IPv4 and IPv6. Both can be configured and operated
simultaneously with VRRPv3.
The following figures describe configuration with SINEC PNI.
1. Click "Start network scan".
2. Select the device found.
3. Click the "Device Management" button.

3 Engineering VRRP
VRRP
Entry-ID: 109798556, V1.0, 09/2021
20
©Siemens AG 2021 All rights reserved
4. Click "Change Device Configuration".
5. Assign an IP address and a subnet mask.
6. Click "Load".