Features:
- Two separate RJ45 ports divide internal automation traffic from the external network path.
- Stateful firewall, IPsec VPN, routing, NAT/NAPT, DHCP, and SysLog functions share one security platform.
- A C-PLUG slot preserves configuration data independently of the replacement hardware.
Siemens 6GK5612-0BA10-2AA3 places packet inspection between two physically distinct Ethernet zones.
Only traffic permitted by the configured firewall, routing, address-translation, or VPN rules passes across that boundary.
Its cabinet-mounted IP20 enclosure receives 24 V DC power and retains exchangeable configuration data on an optional C-PLUG.
Apter Power provides documentation, quotations, and selection support for Siemens 6GK5612-0BA10-2AA3.
Siemens 6GK5612-0BA10-2AA3 SCALANCE S612 Security Module Manuals,Datasheets,Link
Important Notice: Other accessories, manuals, cables, calibration data, software, etc. are not included with this equipment unless listed in the above stock item description. All prices are shown in USD.
Internal and External Port Roles
- Internal port: This RJ45 connection faces the protected automation-network segment.
- External port: The second RJ45 connection faces the upstream or untrusted network segment.
- Link rate: Each connection negotiates 10, 100, or 1000 Mbit/s Ethernet.
- Traffic path: Packets cross between ports only through configured security and routing rules.
Packet Control and Address Translation
- Stateful inspection: Return traffic is associated with an allowed session instead of being judged as an unrelated packet.
- NAT function: One address can be translated when traffic moves between the internal and external networks.
- NAPT function: Port translation distinguishes multiple sessions that share a translated address.
- Log output: SysLog records selected security and communication events for diagnosis.
Encrypted Tunnel Parameters
- Peer identity: The configured remote endpoint must match the address or identity expected by the tunnel.
- Authentication: Pre-shared keys or certificate settings must agree at both VPN peers.
- Protected networks: Local and remote subnet definitions determine which packets enter the tunnel.
- Tunnel capacity: The security module supports up to 128 configured VPN connections.
Supply and Configuration Retention
- Supply input: The module accepts 24 V DC within the documented 19.2 to 28.8 V range.
- Current demand: The source and wiring must allow for the documented maximum current of 0.5 A.
- Configuration media: A C-PLUG can hold the device configuration separately from the base hardware.
- Cabinet requirement: The IP20 enclosure requires installation inside a suitable protected cabinet.