Siemens SCALANCE MM992-2CUC, SCALANCE MM992-2CUC C, SCALANCE MM992-2CU, SCALANCE MM992-2M12 C, SCALANCE MM992-2VD Compact Operating Instructions

...

0 (0)

SIMATIC NET

Industrial Ethernet switches SCALANCE MM900

Introduction

Compact Operating Instructions

Safety notes

Recommendations on network security

Device description

Assembling

Connecting

Technical data

Dimension drawings

Approvals

Appendix

11/2019

A5E02630805-16

Legal information Warning notice system

This manual contains notices you have to observe in order to ensure your personal safety, as well as to prevent damage to property. The notices referring to your personal safety are highlighted in the manual by a safety alert symbol, notices referring only to property damage have no safety alert symbol. These notices shown below are graded according to the degree of danger.

DANGER

indicates that death or severe personal injury will result if proper precautions are not taken.

WARNING

indicates that death or severe personal injury may result if proper precautions are not taken.

CAUTION

indicates that minor personal injury can result if proper precautions are not taken.

NOTICE indicates that property damage can result if proper precautions are not taken.

If more than one degree of danger is present, the warning notice representing the highest degree of danger will be used. A notice warning of injury to persons with a safety alert symbol may also include a warning relating to property damage.

Qualified Personnel

The product/system described in this documentation may be operated only by personnel qualified for the specific task in accordance with the relevant documentation, in particular its warning notices and safety instructions. Qualified personnel are those who, based on their training and experience, are capable of identifying risks and avoiding potential hazards when working with these products/systems.

Proper use of Siemens products

Note the following:

WARNING

Siemens products may only be used for the applications described in the catalog and in the relevant technical documentation. If products and components from other manufacturers are used, these must be recommended or approved by Siemens. Proper transport, storage, installation, assembly, commissioning, operation and maintenance are required to ensure that the products operate safely and without any problems. The permissible ambient conditions must be complied with. The information in the relevant documentation must be observed.

Trademarks

All names identified by ® are registered trademarks of Siemens AG. The remaining trademarks in this publication may be trademarks whose use by third parties for their own purposes could violate the rights of the owner.

Disclaimer of Liability

We have reviewed the contents of this publication to ensure consistency with the hardware and software described. Since variance cannot be precluded entirely, we cannot guarantee full consistency. However, the information in this publication is reviewed regularly and any necessary corrections are included in subsequent editions.

Siemens AG Digital Industries Postfach 48 48 90026 NÜRNBERG GERMANY

A5E02630805-16 Ⓟ 11/2019 Subject to change

1 Introduction...................................................................................................................................................5

2 Safety notes..................................................................................................................................................9

3 Recommendations on network security......................................................................................................11

4 Device description ......................................................................................................................................15

4.1 Product overview....................................................................................................................15

4.2 Product properties and device views .....................................................................................20

4.2.1 MM991-2 (BFOC)...................................................................................................................20

4.2.2 MM991-2FM (BFOC) ............................................................................................................20

4.2.3 MM991-2LD (BFOC) ..............................................................................................................21

4.2.4 MM991-2 (SC) .......................................................................................................................21

4.2.5 MM991-2LD (SC) ...................................................................................................................22

4.2.6 MM991-2LH+ (SC) ................................................................................................................22

4.2.7 MM991-2P (SC RJ)................................................................................................................23

4.2.8 MM992-2CU...........................................................................................................................24

4.2.9 MM992-2CUC ........................................................................................................................24

4.2.10 MM992-2VD ...........................................................................................................................25

4.2.11 MM992-2 (SC)........................................................................................................................26

4.2.12 MM992-2LD (SC) ...................................................................................................................27

4.2.13 MM992-2LH (SC) ..................................................................................................................27

4.2.14 MM992-2LH+ (SC) ................................................................................................................28

4.2.15 MM992-2ELH (SC).................................................................................................................28

4.2.16 MM992-2M12 .........................................................................................................................29

4.2.17 MM992-2SFP / MM992-2SFP (C) .........................................................................................29

5 Assembling .................................................................................................................................................31

5.1 Safety notices for installation .................................................................................................31

5.2 Installation and removal of media modules............................................................................33

5.3 SFP installation in SFP media module...................................................................................38

6 Connecting .................................................................................................................................................41

6.1 Safety when connecting up ....................................................................................................41

6.2 Connecting a media module ..................................................................................................42

7 Technical data ............................................................................................................................................43

7.1 Construction, installation and environmental conditions ........................................................43

7.2 Connectors and electrical data...............................................................................................45

7.3 Cable lengths .........................................................................................................................48

7.4 Other properties .....................................................................................................................51

SCALANCE MM900 Compact Operating Instructions, 11/2019, A5E02630805-16 3

Table of contents

8 Dimension drawings ...................................................................................................................................53

9 Approvals....................................................................................................................................................57

A Appendix.....................................................................................................................................................65

A.1 EMC-compatible installation of electrical Industrial Ethernet or PROFIBUS cabling .............65

A.2 Equipotential bonding.............................................................................................................65

Index...........................................................................................................................................................69

SCALANCE MM900

4 Compact Operating Instructions, 11/2019, A5E02630805-16

Introduction

Purpose of the compact operating instructions

Based on the compact operating instructions, you will be able to install and connect the MM900 media modules correctly.

Validity of these compact operating instructions

These compact operating instructions apply to the MM900 product group within the SCALANCE X-300 product line:

● MM992-2CUC

● MM992-2CUC (C)

● MM992-2CU

● MM992-2M12 (C)

● MM992-2VD

● MM992-2SFP

● MM992-2SFP (C)

● MM991-2 (BFOC)

● MM991-2FM (BFOC)

● MM991-2LD (BFOC)

● MM991-2 (SC)

● MM991-2LD (SC)

● MM991-2LH+ (SC)

● MM991-2P (SC RJ)

● MM992-2 (SC)

● MM992-2 (C) (SC)

● MM992-2LD (SC)

● MM992-2LH (SC)

● MM992-2LH+ (SC)

● MM992-2ELH (SC)

SCALANCE MM900 Compact Operating Instructions, 11/2019, A5E02630805-16 5

Introduction

Designations used

Classification Description Terms used Product line For all devices and variants of all product groups within the

Product group For all devices and variants of a product group, only the

Device For a device, only the device name is used. MM992-2SFP Variant For a variant of the device, the device name has the appro‐

All variants of a device

SIMATIC NET glossary

Explanations of many of the specialist terms used in this documentation can be found in the SIMATIC NET glossary.

You will find the SIMATIC NET glossary here:

SCALANCE X-300 product line, the term IE switches X-300 is used.

product group is used.

priate variant added to it in brackets (2x24V). For all variants of the device, the device name has (all) added

to it.

IE switches X-300

MM900

(-)

● SIMATIC NET Manual Collection or product DVD

● On the Internet under the following address:

Security information

Siemens provides products and solutions with industrial security functions that support the secure operation of plants, systems, machines and networks.

In order to protect plants, systems, machines and networks against cyber threats, it is necessary to implement – and continuously maintain – a holistic, state-of-the-art industrial security concept. Siemens’ products and solutions constitute one element of such a concept.

Customers are responsible for preventing unauthorized access to their plants, systems, machines and networks. Such systems, machines and components should only be connected to an enterprise network or the internet if and to the extent such a connection is necessary and only when appropriate security measures (e.g. firewalls and/or network segmentation) are in place.

For additional information on industrial security measures that may be implemented, please visit https://www.siemens.com/industrialsecurity (http://www.siemens.com/industrialsecurity)

Siemens’ products and solutions undergo continuous development to make them more secure. Siemens strongly recommends that product updates are applied as soon as they are available and that the latest product versions are used. Use of product versions that are no longer supported, and failure to apply the latest updates may increase customers’ exposure to cyber threats.

The DVD ships with certain SIMATIC NET products.

50305045 (https://support.industry.siemens.com/cs/ww/en/view/50305045)

SCALANCE MM900

6 Compact Operating Instructions, 11/2019, A5E02630805-16

To stay informed about product updates, subscribe to the Siemens Industrial Security RSS Feed under https://www.siemens.com/industrialsecurity (http://www.siemens.com/industrialsecurity)

Device defective

If a fault develops, please send the device to your SIEMENS service center for repair. Repairs on-site are not possible.

Recycling and disposal

The products are low in pollutants, can be recycled and meet the requirements of the WEEE directive 2012/19/EU for the disposal of electrical and electronic equipment.

Do not dispose of the products at public disposal sites.

For environmentally friendly recycling and the disposal of your old device contact a certified disposal company for electronic scrap or your Siemens contact (Product return (https://

support.industry.siemens.com/cs/ww/en/view/109479891)).

Note the different national regulations.

Introduction

SCALANCE MM900 Compact Operating Instructions, 11/2019, A5E02630805-16 7

Introduction

SCALANCE MM900

8 Compact Operating Instructions, 11/2019, A5E02630805-16

Safety notes

Read the safety notices

Note the following safety notices. These relate to the entire working life of the device.

You should also read the safety notices relating to handling in the individual sections, particularly in the sections "Installation" and "Connecting up".

CAUTION

To prevent injury, read the manual before use.

Safety notices on use in hazardous areas

General safety notices relating to protection against explosion

WARNING

EXPLOSION HAZARD

Do not open the device when the supply voltage is turned on.

Safety notices when using the device according to Hazardous Locations (HazLoc) and FM. If you use the device under HazLoc or FM conditions you must also keep to the following safety

notices in addition to the general safety notices for protection against explosion:

This equipment is suitable for use in Class I, Division 2, Groups A, B, C and D or non-hazardous locations only.

This equipment is suitable for use in Class I, Zone 2, Group IIC or non-hazardous locations only.

SCALANCE MM900 Compact Operating Instructions, 11/2019, A5E02630805-16 9

Safety notes

SCALANCE MM900

10 Compact Operating Instructions, 11/2019, A5E02630805-16

Recommendations on network security

NOTICE

Information security

Connect to the device and change the standard passwords for the users "admin" and "user" before you operate the device. To be able to change passwords you need to be logged in with write access to the configuration data.

To prevent unauthorized access, note the following security recommendations.

General

● You should make regular checks to make sure that the device meets these recommendations and/or other security guidelines.

● Evaluate your plant as a whole in terms of security. Use a cell protection concept with suitable products (https://www.industry.siemens.com/topics/global/en/industrial-security/

pages/default.aspx).

● When the internal and external network are disconnected, an attacker cannot access internal data from the outside. Therefore operate the device only within a protected network area.

● For communication via non-secure networks use additional devices with VPN functionality to encrypt and authenticate the communication.

● Terminate management connections correctly (WBM. Telnet, SSH etc.).

Physical access

● Restrict physical access to the device to qualified personnel because the plug-in data medium can contain sensitive data.

● Lock unused physical interfaces on the device. Unused interfaces can be used to gain access to the plant without permission.

Software (security functions)

● Keep the firmware up to date. Check regularly for security updates for the device. You can find information on this at the Industrial Security (https://www.siemens.com/

industrialsecurity) website.

● Inform yourself regularly about security recommendations published by Siemens ProductCERT (https://www.siemens.com/cert/en/cert-security-advisories.htm).

● Only activate protocols that you require to use the device.

● Restrict access to the management of the device with rules in an access control list (ACL).

SCALANCE MM900 Compact Operating Instructions, 11/2019, A5E02630805-16 11

Recommendations on network security

● The option of VLAN structuring provides protection against DoS attacks and unauthorized access. Check whether this is practical or useful in your environment.

● Use a central logging server to log changes and accesses. Operate your logging server within the protected network area and check the logging information regularly.

Passwords

● Define rules for the assignment of passwords.

● Regularly change your passwords to increase security.

● Use passwords with a high password strength.

● Make sure that all passwords are protected and inaccessible to unauthorized persons.

● Do not use the same password for different users and systems.

Certificates and keys

● On the device there is a preset SSL certificate with key. Replace this certificate with a selfmade certificate with key. We recommend that you use a certificate signed either by a reliable external or by an internal certification authority.

● Use a certification authority including key revocation and management to sign certificates.

● Make sure that user-defined private keys are protected and inaccessible to unauthorized persons.

● It is recommended that you use password-protected certificates in the PKCS #12 format

● Verify certificates and fingerprints on the server and client to prevent "man in the middle" attacks.

● It is recommended that you use certificates with a key length of at least 2048 bits.

● Change certificates and keys immediately, if there is a suspicion of compromise.

SCALANCE MM900

12 Compact Operating Instructions, 11/2019, A5E02630805-16

Secure/non-secure protocols

● Avoid or disable non-secure protocols, for example Telnet and TFTP. For historical reasons,

these protocols are available, however not intended for secure applications. Use nonsecure protocols on the device with caution.

● Check whether use of the following protocols and services is necessary:

– Non authenticated and unencrypted ports

– MRP, HRP

– LLDP

– DHCP Options 66/67

The following protocols provide secure alternatives:

– HTTP → HTTPS

– TFTP → FTPS

– Telnet → SSH

– SNTP → NTP

– SNMPv1/v2c → SNMPv3

Check whether use of SNMPv1/v2c. is necessary. SNMPv1/v2c are classified as nonsecure. Use the option of preventing write access. The device provides you with suitable setting options. If SNMP is enabled, change the community names. If no unrestricted access is necessary, restrict access with SNMP. Use the authentication and encryption mechanisms of SNMPv3.

Recommendations on network security

● Use secure protocols when access to the device is not prevented by physical protection

measures.

● If you require non-secure protocols and services, operate the device only within a protected

network area.

● Restrict the services and protocols available to the outside to a minimum.

● For the DCP function, enable the "DCP read-only" mode after commissioning.

SCALANCE MM900 Compact Operating Instructions, 11/2019, A5E02630805-16 13

Recommendations on network security

SCALANCE MM900

14 Compact Operating Instructions, 11/2019, A5E02630805-16

Device description

4.1 Product overview

Note Type designation and labeling of a media module differ

Example: The device with article number 6GK5 992‑2AS00‑8AA0 is called "MM992‑2SFP", the labeling on the device is "9922AS".

The labeling on the devices is shown in bold in the following table following the [article numbers].

Note Media modules for SFP transceivers

Only the media modules MM992-2SFP andMM992-2SFP (C) may be fitted with approved SFP transceivers. These SFP media modules can be fitted with up to two SFPs.

Note Supplement (C) in the type name

Media modules with the supplement (C) in the type name have varnished printed circuit boards (conformal coating).

Media module Properties Article number

Labeling on the device

MM992-2CUC 2 x 10/100/1000 Mbps, RJ-45 ports electrical with securing collar 6GK5 992-2GA00-8AA0

9922GA

MM992-2CUC (C) 2 x 10/100/1000 Mbps, RJ-45 ports electrical with securing collar, var‐

nished

MM992-2CU 2 x 10/100/1000 Mbps, RJ-45 port electrical without securing collar 6GK5 992-2SA00-8AA0

MM992-2M12 (C) 2 x 10/100/1000 Mbps, GE M12 connector electrical, varnished 6GK5 992-2HA00-0AA0

MM992-2VD 2 x 10/100/1000 Mbps, RJ-45 ports electrical with securing collar, varia‐

ble distance

MM992-2SFP 2 x 100/1000 Mbps, SFP media module 6GK5 992-2AS00-8AA0

MM992-2SFP (C) 2 x 100/1000 Mbps, SFP media module, varnished 6GK5 992-2AS00-8FA0

MM991-2 (BFOC) 2 x 100 Mbps, BFOC port optical, for glass FO cable (multimode), up to

max. 5 km

6GK5 992-2GA00-8FA0 9922GA

9922SA

9922HA 6GK5 992-2VA00-8AA0 9922VA

9922AS

9922AS 6GK5 991-2AB00-8AA0 9912AB

SCALANCE MM900 Compact Operating Instructions, 11/2019, A5E02630805-16 15

Interface

Number of ports

100 Mbps

MM991-2

Device description

4.1 Product overview

Media module Properties Article number

Labeling on the device

MM991-2FM (BFOC) 2 x 100 Mbps, BFOC port optical, for glass FO cable (multimode) with

diagnostics up to max. 5 km

MM991-2LD (BFOC) 2 x 100 Mbps, BFOC port optical, for glass FO cable (single mode), up to

max. 26 km

MM991-2 (SC) 2 x 100 Mbps, SC ports optical, for glass FO cable (multimode), up to

max. 5 km

MM991-2LD (SC) 2 x 100 Mbps, SC ports optical, for glass FO cable (single mode), up to

max. 26 km

MM991-2LH+ (SC) 2 x 100 Mbps, SC ports optical, for glass FO cable (single mode), up to

max. 70 km

MM991-2P (SC RJ) 2 x 100 Mbps SC RJ ports optical for Plastic Optical Fiber (POF) up to

max. 50 m or Polymer Cladded Fiber (PCF) up to max. 100 m

MM992-2 (SC) 2 x 1000 Mbps, SC ports optical, for glass FO cable (multimode), up to

max. 750 m

MM992-2 (C) (SC) 2 x 1000 Mbps, SC ports optical, for glass FO cable (multimode), up to

max. 750 m, varnished

MM992-2LD (SC) 2 x 1000 Mbps, SC ports optical, for glass FO cable (single mode), up to

max. 10 km

MM992-2LH (SC) 2 x 1000 Mbps, SC ports optical, for glass FO cable (single mode), up to

max. 40 km

MM992-2LH+ (SC) 2 x 1000 Mbps, SC ports optical, for glass FO cable (single mode), up to

max. 70 km

MM992-2ELH (SC) 2 x 1000 Mbps, SC ports optical, for glass FO cable (single mode), up to

max. 120 km

6GK5 991-2AB01-8AA0 9912AB 6GK5 991-2AC00-8AA0 9912AC 6GK5 991-2AD00-8AA0 9912AD 6GK5 991-2AF00-8AA0 9912AF 6GK5 991-2AE00-8AA0 9912AE 6GK5 991-2AH00-8AA0 9912AH 6GK5 992-2AL00-8AA0 9922AL 6GK5 992-2AL00-8FA0 9922AL 6GK5 992-2AM00-8AA0 9922AM 6GK5 992-2AN00-8AA0 9922AN 6GK5 992-2AP00-8AA0 9922AP 6GK5 992-2AQ00-8AA0 9922AQ

Type key for the MM900 media modules

16 Compact Operating Instructions, 11/2019, A5E02630805-16

The type designation of an MM900 media module is made up of several parts that have the following meaning:

Interface Property [-] BFOC port 100 Mbps multimode FO cable

LD BFOC port 100 Mbps single mode FO cable (SC) SC port 100 Mbps multimode FO cable (up to max. 5 km) LD (SC) SC port 100 Mbps single mode FO cable (up to max. 26 km) LH+ (SC) SC port 100 Mbps single mode FO cable (up to max. 70 km)

SCALANCE MM900

Interface

Number of ports

1000 Mbps

MM992-2

Device description

4.1 Product overview

Interface Property P SC RJ port 100 Mbps POF or PCF

FM BFOC port 100 Mbps multimode FO cable with diagnostics

Interface Property CU RJ-45 port electrical 10/100/1000 Mbps without securing collar

CUC RJ-45 port electrical 10/100/1000 Mbps with securing collar M12 M12 connection electrical 10/100/1000 Mbps VD RJ-45 port electrical 10/100/1000 Mbps with securing collar (up to max. 1000 m) [-] SC port 1000 Mbps multimode FO cable (up to max. 750 m) LD SC port 1000 Mbps single mode FO cable (up to max. 10km) LH SC port 1000 Mbps single mode FO cable (up to max. 40 km) LH+ SC port 1000 Mbps single mode FO cable (up to max. 70 km) ELH SC port 1000 Mbps single mode FO cable (up to max. 120 km) SFP SFP media module

Ethernet standards of the media modules

The following table shows which Ethernet standards according to IEEE 802.3 the individual media modules comply with.

Media module IEEE 802.3 standard MM992-2CUC 1000Base-TX

MM992-2CUC (C) 1000Base-TX MM992-2CU 1000Base-TX MM992-2M12 (C) 1000Base-TX MM992-2VD 1000Base-TX MM991-2 (BFOC) 100Base-FX MM991-2FM (BFOC) 100Base-FX MM991-2LD (BFOC) 100Base-FX MM991-2 (SC) 100Base-FX MM991-2LD (SC) 100Base-FX MM991-2LH+ (SC) 100Base-FX MM991-2P (SC RJ) 100Base-FX MM992-2 (SC) 1000Base-SX MM992-2 (C) (SC) 1000Base-SX MM992-2LD (SC) 1000Base-LX MM992-2LH (SC) 1000Base-LX

SCALANCE MM900 Compact Operating Instructions, 11/2019, A5E02630805-16 17

Device description

4.1 Product overview

Media module IEEE 802.3 standard MM992-2LH+ (SC) 1000Base-LX

MM992-2ELH (SC) 1000Base-LX

Note Use media modules only in an approved modular device ("M")

Use an MM900 media module only in a device equipped with suitable slots for such modules. Example: X308-2M.

The MM900 media module decides what can be connected

The connection of end devices or other network segments does not depend on the module slot, but rather on the selected MM900 media module.

Possible attachment Figure BFOC ports optical

BFOC-Ports optical with diagnostics

Optical SC ports

SC RJ ports optical

Electrical RJ-45 ports without securing collar

Electrical RJ-45 ports with securing collar

SCALANCE MM900

18 Compact Operating Instructions, 11/2019, A5E02630805-16

Possible attachment Figure GE M12 connector electrical

SFP transceivers Only the SFP media module MM992-2SFP may be

fitted with approved SFP transceivers. The SFP me‐ dia module can be fitted with up to two SFPs.

Unpacking and checking

WARNING

Do not use any parts that show evidence of damage

If you use damaged parts, there is no guarantee that the device will function according to the specification.

Device description

4.1 Product overview

Scope of delivery

If you use damaged parts, this can lead to the following problems:

● Injury to persons

● Loss of the approvals

● Violation of the EMC regulations

● Damage to the device and other components

Use only undamaged parts.

1. Make sure that the package is complete.

2. Check all the parts for transport damage.

The following components are supplied with a SCALANCE MM900 media module:

● MM99x-2xx media module

● Compact operating instructions

Note Identification labels

The location labels identify the media modules and ship with the SCALANCE device.

SCALANCE MM900 Compact Operating Instructions, 11/2019, A5E02630805-16 19

Device description

4.2 Product properties and device views

4.2.1 MM991-2 (BFOC)

Possible attachments

The MM991-2 (BFOC) media module has the following:

● 2 x 100 Mbps, BFOC port optical (multimode, glass) up to max. 5 km

Figure 4-1 MM991-2 (BFOC) [9912AB]

[Device labeling in square brackets]

4.2.2 MM991-2FM (BFOC)

Possible attachments

The MM991-2FM (BFOC) media module has the following:

● 2 x 100 Mbps, BFOC port optical (multimode, glass) with diagnostics up to max. 5 km

Figure 4-2 MM991-2FM (BFOC) [9912AB]

[Device labeling in square brackets]

SCALANCE MM900

20 Compact Operating Instructions, 11/2019, A5E02630805-16

4.2.3 MM991-2LD (BFOC)

Possible attachments

The MM991-2LD (BFOC) media module has the following:

● 2 x 100 Mbps, BFOC port optical, (single mode glass), up to max. 26 km

Figure 4-3 MM991-2LD (BFOC) [9912AC]

[Device labeling in square brackets]

Device description

4.2 Product properties and device views

4.2.4 MM991-2 (SC)

Possible attachments

The MM991-2 (SC) media module has the following:

● 2 x 100 Mbps, SC port optical, (multimode glass), up to max. 5 km

Figure 4-4 MM991-2 (SC) [9912AD]

[Device labeling in square brackets]

SCALANCE MM900 Compact Operating Instructions, 11/2019, A5E02630805-16 21

+ 49 hidden pages