Siemens Industry Online Support - Automation Service, Automation Support, Simatic Service, Simatic Support, Technical Support, Technical Consulting

Industrial Security -- Product information -- System description

	What should you watch out for when you enable the "SNMP" function in the configuration of the security module?
	Which security modules support dynamic DNS and can use it to communicate with each other?
	Why does the VPN LED of the SCALANCE M875 and MD741-1 continue to light although the secure IPsec tunnel connection is disconnected?
	What should you watch out for when enabling and using the security functions of CP343-1 Advanced and CP443-1 Advanced?
	How can you display the security status of the CP1628 over the Online View in the Security Configuration Tool (SCT)?
	What remedies are there for weak points in WinCC flexible 2008 and WinCC V11?
	Where can you find information on the topic of "Industrial Security"?

Industrial Ethernet S7-300/400 CPs -- Product information -- System description (protocols)

	What are the differences between OPEN MODBUS / TCP Redundant V1 and OPEN MODBUS / TCP Redundant V2?
	What should you watch out for when you enable the "SNMP" function in the configuration of the security module?
	Which security modules support dynamic DNS and can use it to communicate with each other?
	What should you watch out for when enabling and using the security functions of CP343-1 Advanced and CP443-1 Advanced?
	What should you watch out for when upgrading from previous modules to the successor module CP443-1 or CP443-1 Advanced?
	How do you verify the authenticity of the Siemens modules CP343-1 and CP443-1?
	What should you watch out for when operating a port of CP343-1, 6GK7343-1CX10-0XE0 and 6GK7343-1EX30-0XE0 with firmware V2.1 or higher, with 10 Mbit/s half duplex?
	Which IO controllers and IO devices support the following functions: IRT, prioritized startup, MRP, PROFIenergy, Shared device, I device and clock-synchronized mode?
	Where do you procure the firmware extension for the CP 343-1 ERPC for database connection?
	Which SIMATIC S7-300/S7-400 modules support the NTP time-of-day message and how do you activate this kind of time synchronization?
	Which modules can you use when implementing software redundancy?
	Which types of connection/protocols do the S7-300/400 CPUs and the CPs support by default?
	Which PROFINET nodes support automatic commissioning and the replace device without interchangeable medium function?
	Which PROFINET nodes support the extended PN diagnostics and what do you have to configure?
	Using C-PLUG with network components and SIMATIC CPs
	What properties have the communication services and protocols that can be used in the Industrial Ethernet network?
	Behavior of the communication processors during data transfer via TCP connections without RFC 1006
	What should you watch out for with the ICMP Redirect (Internet control message protocol) function regarding the IP address of the router used for Industrial Ethernet CPs?
	What should you pay attention to with the autonegotiation function for negotiating the LAN mode in Industrial Ethernet CPs?
	What is the connection between subnet masks and IP addresses with regard to subnetting and supernetting (Classless Inter Domain Routing CIDR)?
	What are the requirements for using the S7 routing function and which modules can you implement?
	In the case of open TCP/IP communication via Industrial Ethernet using T blocks with IE CPs and CPUs, why are different amounts of messages sent when the maximum length of 1452 bytes of user data is transferred?
	What properties, advantages and special features does the ISO protocol offer?
	What properties, advantages and special features does the UDP protocol offer?
	What properties, advantages and special features does the ISO-on-TCP protocol offer?
	What properties, advantages and special features does the S7 protocol offer?
	What properties, advantages and special features does the TCP protocol offer?
	What are the requirements for disabling the PROFINET CBA interface for CP443-1EX40?
	"Time Wait" with TCP connection setup
	What are the different data block lengths for the various protocols of Send/Receive communication?
	What is RFC1006 and what do I need this service for?
	Meaning and function of the "Keep Alive" in TCP connections

Cellular Radio Components (GSM) -- Product information -- System description

	How do you code an SMS text in the GSM 3.38 cellular radio standard?
	Which security modules support dynamic DNS and can use it to communicate with each other?
	Why does the VPN LED of the SCALANCE M875 and MD741-1 continue to light although the secure IPsec tunnel connection is disconnected?
	What measures should you take when the radio transmission is very sluggish or unstable due to a bad radio link?
	Where can you find information on the topic of "Industrial Security"?

Which security modules support dynamic DNS and can use it to communicate with each other?

Part number:

Description
Using dynamic DNS you can access a module with dynamic IP address over the Fully Qualified Domain Name (FQDN).

The security module reports the current WAN IP over which the module can be reached to a provider for dynamic DNS (DynDNS.org, no-ip.com, for example). The provider makes sure that DNS queries to the FQDN of the module are answered with the WAN IP of the module.

The overview below shows which security modules support dynamic DNS as VPN server and VPN client and can use it to communicate with each other.

VPN client VPN server

SCALANCE S V3 SCALANCE M875
MD741-1

SOFTNET Security Client (SSC) yes²⁾ yes¹⁾

SCALANCE S V3 − −

SCALANCE M875
MD741-1 yes yes
Table 01

¹⁾ Communication using dynamic DNS is possible with SSC V3 onwards.
²⁾ Communication using dynamic DNS is possible with SSC V4 onwards.

Note

The CPx43-1 Advanced does not support dynamic DNS.
The SCALANCE S V3 is not a DNS client. It can only transmit its current IP address to the DNS server, but cannot resolve any domain names.
The SCALANCE S V3 supports the following providers: DynDNS.org, non-ip.com or a freely defined service.
The SCALANCE M875 is compatible with the DNS services of the provider DynDNS.org. For dynDNS the M875 needs a public IP address that can be reached from the internet.

Additional information
More information about the security modules is available in the manuals below.

Manual Entry ID

Where can you find information on the topic of "Industrial Security"? 50203404

SIMATIC NET Industrial Ethernet Security SCALANCE S V3.0 Installation and Commissioning Manual 56576669

SIMATIC NET Industrial Ethernet Security Basics and Applications Configuration Manual 56577508

SIMATIC NET Industrial Ethernet Security Getting Started 60166939

UMTS Router with HSDPA SCALANCE M873-0 49507278

SIMATIC NET Telecontrol SCALANCE M875 Operating Instructions 58122394

SIMATIC NET S7-400 - Industrial Ethernet CP 443-1 Advanced (GX30) Device Manual Part B 59187252

SIMATIC NET S7-300 - Industrial Ethernet S7 CPs for Industrial Ethernet
CP 343-1 Advanced (GX30) Device Manual Part B 61199572
Table 02

Entry ID:62812011

Date:2012-08-06

I regard this article....

as helpful

as not helpful

Copy link

Suggestion for the entry

Send to a friend