Hello,

I can't help with concrete information because there are some points missing in your explanation.

I'll try while I suppose you try to load first time this SCALANCE S device.

So if fault LED of S612 is green it means that the SCALANCE S still has an IP address.
Sometimes for routers and interfaces it happens that the wrong IP address is initially set to the wrong interface if you do so via Security Configuration Tool.
It looks like the 192.168.0.10 is set to the SCALANCE S but your PC is connected via external interface to SCALANCE S and has just an IP address in subnet 192.168.1.0.

What I propose to do any time with startup SCALANCE S is:
Use Primary Setup Tool to set up an IP address initially and after that download configuration with Security Configuration Tool.

If my supposes are right then you can solve the actual state by changing the IP address of your PC to an IP address in subnet 192.168.0.0. Via external interface then you also can load but the end of the download would be an error because after boot the interface will have the IP 192.168.1.222. So after that you can go back to the 192.168.1.0 subnet with the PC interface.

Best regards
Alexis

Thanks Mr. Alexis.

I used PST to set the IP address of Scalance and now I can download the configuration to module.

But the current scenario is, The configuration has been transferred to module but I could not able to ping any of the interface of Scalance i.e. Internal and External.

I have one more doubt, If I assign a certain IP address to Internal Interface of S612 that IP gets assign to external interface as well. Both the interfaces shows same IP address if I search it by using Primary Setup Tool.

Hello,

so the initial ping behavior of SCALANCE S is not that much easy to understand if you know the behavior of switches or routers.

So a SCALANCE S is a cell protection security device and therefore the initial ping behavior is as following:

PC connected to green interface -> ping to green interface is allowed

PC connected to red interface -> pint to red interface is blocked

If you want to change the behavior you have to change it in advanced mode of firewall in tab Default rules for IP services.

One configuration option is to allow the direct ping through a direct connected interface. That are the checkboxes for ICMP incoming for each interface.
The second configuration option is to allow to ping interfaces if you have routing mode configured. Therefore the checkbox "Enable ICMP test for interface" is used.
You can read about this in the online help accessible directly at this dialog in SCT via the Help Button.

 Best regards
Alexis

Mr. Alexis,

Thanks for the information, I got to know about Advanced Mode and I can now able to ping the external interface after transferring the configuration.

But I am not clear about the configuration to be made in order to access the internal interface over internet. I am using router at external interface and PLC network is connected at internal interface.

Do I have to use SoftNET Security Client software for configuring and accessing the Scalance?

Please find herewith the attached system architecture.

New question published by nkr is split to a separate thread with the subject Scalacne S612, Error while downloading configuration.

Best regards
Min_Moderator