NAT function in Siemens SC632-2C

[Jeroen Benoot]

Hi all,

I had a Siemens Scalance S602 setup in the past that worked fine.
But these are obsolete now and replaced by a Scalance SC632-2C.
The only function I use it for is for NAT (Network address translation).
However in the new SC632-2C the config is slightly different and I can't seem to figure out how to correctly configure it.

The basic function it has to do is:
CPU IP: 192.168.1.1 in machine network
Scalance must translate this to 10.21.40.50 in IT network.

Anyone has any experience with this?

thanks!

 

[siemensSC632-2C]

Hi Jeroen,

The configuration manual was a challenge to find as I'm currently going through the same motion of configuring the SC632-2C.

https://support.industry.siemens.co...anual&mlfb=6GK5632-2GS00-2AC2&mfn=ps&lc=en-GB

• SIEMENS GLOSSARY
https://cache.industry.siemens.com/.../att_1082377/v1/NW_SIMATIC-NET-Glossar_76.pdf
• Operating Instructions SIMATIC NET Industrial Ethernet security SCALANCE SC-600
https://cache.industry.siemens.com/dl/files/812/109754812/att_1122569/v1/BA_SCALANCE-SC-600_76.pdf
• System Manual SIMATIC NET Industrial Ethernet / PROFINET Industrial Ethernet
https://cache.industry.siemens.com/dl/files/465/27069465/att_998611/v1/SYH_IE-Net_76.pdf
• Configuration Manual SIMATIC NET Industrial Ethernet Security SCALANCE SC-600 Web Based Management (WBM) V3.0
https://cache.industry.siemens.com/.../att_1122575/v1/PH_SCALANCE-SC-600-WBM_76.pdf
• NAT Examples Which NAT scenarios can you realise with SCALANCE SC-600 / M-800 / S615?
https://support.industry.siemens.com/cs/gb/en/view/109744660
• NAT XM/XR Examples How do you use How do you use a SCALANCE XM-400/ XR-500 as NAT router?
https://support.industry.siemens.com/cs/gb/en/view/109762688
• Siemens: How to connect to multiple PLCs behind a one-to-many NAT device
https://www.awc-inc.com/wp-content/uploads/2021/02/NAPT_Multiple_PLC.pdf

Once you've logged into the Web Based Management display using PRONETA to set the IP address on P1 Internal VLAN 1, under layer 3 there are two settings you want to drill into - subnets and NAT.

I'm yet to commission our device yet but will update on any revelations in due time.

Cheers.

 

[siemensSC632-2C]

Hi all,

I had a Siemens Scalance S602 setup in the past that worked fine.
But these are obsolete now and replaced by a Scalance SC632-2C.
The only function I use it for is for NAT (Network address translation).
However in the new SC632-2C the config is slightly different and I can't seem to figure out how to correctly configure it.

The basic function it has to do is:
CPU IP: 192.168.1.1 in machine network
Scalance must translate this to 10.21.40.50 in IT network.

Anyone has any experience with this?

thanks!

Hi Jeroen,

From what you've outlined in your post you'll need to follow the steps below (assuming P1 VLAN 1 is internal PLC Network and P2 VLAN 2 is external IT Network):

1. Install PRONETA
2. Set IP Address for SCALANCE Device as 192.168.1.1 (P1 VLAN 1 Internal PLC network)
3. Login to SCALANCE on web browser (like google chrome) 192.168.1.1, you'll need to be on the same subnet to access the WBM (Web Based Management) page (username: admin, password: admin)
4. Go to Layer 3 > Subnets and configure VLAN 1 internal subnet to 192.168.1.1 and VLAN 2 external subnet to 10.21.40.50
5. Go to Layer 3 > NAT > NETMAP and create a 1:1 source NAT rule from source VLAN 2 to destination VLAN 1, source ip subnet 10.21.40.0/24, translated source ip subnet 192.168.1.0/24

When you do an ARP request on subnet 192.168.1.0/24 you should see your external device you want to connect to from subnet as 192.168.1.x with the MAC address of the SCALANCE firewall?

 

[mk42]

Man, if I ever have one of my HW devices create an account online to tell me how to use it.... Time for a vacation
I heard Siemens was getting into ChatGPT type stuff, but I don't think this is what they had in mind, lol
props for coming through with the info though

 

[siemensSC632-2C]

Man, if I ever have one of my HW devices create an account online to tell me how to use it.... Time for a vacation
I heard Siemens was getting into ChatGPT type stuff, but I don't think this is what they had in mind, lol
props for coming through with the info though

Ahaha , thanks mate. Would be interesting to see what Siemens can do for documentation to use something like ChatGPT if it saves having to read 100+ pages

 

[Jim3846]

CPU IP: 192.168.1.1 <<< i would not use this IP , this is typically a switch IP by default. change to 192.168.1.11