- Home
- Industrial Routers & WLAN
- Siemens 6GK5646-2GS00-2AC2 SCALANCE SC646-2C 6-Port VPN Firewall Industrial Router Siemens 6GK5646-2GS00-2AC2 SCALANCE SC646-2C 6-Port VPN Firewall Industrial Router
Siemens 6GK5646-2GS00-2AC2 SCALANCE SC646-2C 6-Port VPN Firewall Industrial Router
Siemens 6GK5646-2GS00-2AC2 SCALANCE SC646-2C 6-Port VPN Firewall Industrial Router
Get Quote
- Description
The Siemens SCALANCE SC646-2C (6GK5646-2GS00-2AC2) is an industrial security appliance combining a stateful inspection firewall, NAT/NAPT and an IPsec/OpenVPN gateway for up to 200 tunnels with AES-256 encryption. It provides six ports - four RJ45 10/100/1000 Mbit/s plus two combo ports - runs on redundant 24V DC, and supports ring redundancy with HRP and MRP.
Technical Specifications
| SKU | 6GK5646-2GS00-2AC2 |
| Brand | Siemens |
| Series | SCALANCE S Industrial Security Appliance |
| EAN | 4047622516393 |
| Product Type Designation | S646 |
| Network Ports | 4x RJ45 10/100/1000 Mbit/s + 2x combo port (RJ45 or SFP) |
| Removable Storage | C-PLUG slot |
| Digital Signal I/O | 1x input, 1x signaling output contact, 24V DC, 0.1A max, 2-pole terminal blocks |
| Supply Voltage | 24V DC, dual redundant inputs, 9.6-31.2V range |
| Current Consumption | 0.4A max per input |
| Power Loss | 9.6W per input |
| Operating Temperature | -40 to +70 degC |
| Storage/Transport Temperature | -40 to +85 degC |
| Relative Humidity | max 95%, no condensation |
| Protection Class | IP20 |
| Dimensions (W x H x D) | 60 x 145 x 125 mm |
| Net Weight | 0.58 kg |
| Mounting | 35mm DIN rail, S7-300 rail, S7-1500 rail, wall mounting |
| Management | CLI, web-based management (WBM), SNMP v1/v2/v3, MIB support |
| Supported Protocols | TFTP, FTP, SFTP, DCP, LLDP, NTP, SNTP, SSH, RADIUS client, IEEE 802.1x |
| Firewall | Stateful inspection, packet filter log, audit log, system log |
| VPN Gateway | IPsec, OpenVPN, up to 200 connections |
| VPN Encryption | AES-256, AES-192, AES-128, 3DES-168, DES-56 |
| VPN Authentication | Preshared key (PSK), X.509v3 certificates |
| VPN Hashing | MD5, SHA-1, SHA-256, SHA-384, SHA-512 |
| Routing | Static IP routing IPv4/IPv6, OSPFv2, OSPFv3 |
| VLAN | Port-based, max 257 VLANs |
| Redundancy | Ring redundancy, standby redundancy, HRP, MRP, STP, RSTP |
| Time Sync | IEEE 1588 v2 master, NTP, SNTP |
| PROFINET Conformity Class | A |
| MTBF | 31.64 years |
| Country of Origin | Germany |
Certifications & Standards
- UKCA
- CE
- C-Tick
- CCC
- ABS
- BV
- DNV GL
- LRS
- NK
- PRS
Selection Notes
The SC646-2C carries the SC642-2C's IPsec/OpenVPN gateway (200 tunnels, AES-256) onto six ports instead of two, plus ring redundancy with HRP and MRP - pick it over the SC642-2C when more than two connected segments need individual firewall rules, or when the appliance sits inside a redundant Ethernet ring. IEEE 1588 v2 master support adds time synchronization to the local segment, which the SC642-2C does not list. Choose the SC636-2C instead if the six-port firewall/NAT function is sufficient and a permanent VPN gateway is not needed.
Applications
The SC646-2C fits a production cell with several connected machines that requires both local segmentation across multiple ports and a permanent encrypted tunnel back to a central engineering or SCADA network, with ring redundancy keeping the cell's own Ethernet ring intact during a link failure.