Configuring SCALANCE W780 Access Points for Industrial Wireless

David Krause11 min read
Application NoteIndustrial NetworkingSiemens
Licensed PE Working through this on a live machine? A Maine-licensed engineer can take it from here — included with IMD hardware, by the hour for everything else. Book an engineer

1. Application Overview

The SCALANCE W780/W740 product family provides IEEE 802.11-based industrial wireless LAN connectivity for PLCs, HMI panels, drives, and remote I/O stations. A typical application pairs a single SCALANCE W780-series access point (AP) with one or more SCALANCE W740-series client modules, creating a transparent Ethernet bridge between the wired automation network and mobile or distributed field assets. For a two-client topology carrying EtherNet/IP traffic, this architecture is straightforward provided the bandwidth budget, RF path, and managed-switch configuration are sized correctly.

Decisions that must be made up front for any W780/W740 deployment:

  • Access point selection: W788-1PRO (IP65) versus W784-1 (IP30).
  • Client selection: W746-1PRO (IP65) versus W746-1 (IP30) versus W744-1PRO (IP65).
  • Antenna configuration: integrated diversity omni-directional antennas versus external remote antennas with extension cables.
  • Backbone switch: SCALANCE X300/X400 (or equivalent managed third-party switch) with IGMP/IGMP Snooping enabled for multicast-heavy protocols.
  • Protocol classification: unicast (Modbus TCP, TCP/IP CIP explicit messages) versus multicast (CIP I/O, EtherNet/IP implicit connections with multicast consumers).

2. SCALANCE W780 Access Point Family

The W780 line is the access-point tier of the SCALANCE W portfolio. Two variants dominate IP65 and IP30 plant zones:

Model Protection Typical Mounting Antenna Interface
W788-1PRO IP65 Cabinet-free, on-machine, outdoor/trackside Two integrated R-SMA diversity antennas (omni)
W784-1 IP30 Control cabinet, dry industrial areas External antennas required (R-SMA connectors)
W786-1 IP30 Control cabinet, dual-radio variant External antennas required

For a topology with two stationary clients in a short-range (<50 m line-of-sight) plant zone, the W788-1PRO is typically the lowest-effort choice because the diversity antennas ship with the device and the housing tolerates cabinet-free mounting. Select the W784-1 only when a controlled cabinet is available and external antennas (omni or directional, depending on RF survey) are acceptable.

Refer to the SCALANCE W780/W740 IEEE 802.11n CLI Manual (Entry ID 109759651) for full CLI command set, supported country profiles, and firmware-specific behavior. The CLI document applies to devices running firmware v6.5 and newer; older v4.x firmware uses a different command tree.

3. SCALANCE W740 Client Modules

Client modules associate with the W780 AP and present an Ethernet interface to the downstream device. Key part numbers:

Model Protection Ethernet Ports Notes
W746-1 IP30 1 x RJ45 Single-port client; requires external antennas
W746-1PRO IP65 1 x RJ45 Integrated diversity antennas; preferred over W744-1PRO for multi-node cabling
W744-1PRO IP65 1 x RJ45 (limited bridging) Older variant; only one Ethernet node recommended downstream

When more than one Ethernet node must hang off a single client radio (e.g. a CompactLogix processor and a PanelView Plus HMI sharing the same wireless segment), the W746-1PRO is the correct selection. The W744-1PRO is acceptable only when the client radio serves exactly one device and a low port count is acceptable. Both client variants support the same 802.11n PHY and identical security profiles as the W780 AP.

4. IP Rating and Environmental Selection

Use the following decision matrix when the IP rating is the binding constraint:

Requirement Access Point Client
IP30 (cabinet only) W784-1 + external antennas W746-1 + external antennas
IP65 (cabinet-free, outdoor, trackside) W788-1PRO W746-1PRO
IP65 with two or more wired nodes at the client W788-1PRO W746-1PRO (not W744-1PRO)
Warning: Mounting an IP30 module in an IP65 environment will cause premature failure regardless of antenna choice. Validate the cabinet NEMA/UL rating separately if a hybrid topology is required.

5. Antenna Selection Strategy

Antenna choice is a function of distance, line-of-sight, and the directional distribution of clients:

  • Short range, <30 m, omnidirectional coverage required: use the integrated R-SMA omni antennas on the W788-1PRO / W746-1PRO. No antenna selection work is required.
  • Short range, <30 m, but a structured cabinet deployment is required: pair a W784-1 with an external 2.4/5 GHz omni antenna (R-SMA male).
  • Long range, >30 m, single client on a known bearing: use a directional Yagi or panel antenna on both the AP and client sides. Point-to-point alignment is required.
  • Long range, >30 m, multiple clients on different bearings: deploy multiple APs each with a directional antenna, or accept the link-budget penalty of a single high-gain omni on the AP.

When extension cables are needed to place external antennas outside a cabinet, use the Siemens ANT792-4DN antenna cable assembly. Total cable loss at 2.4 GHz with a 6 m cable is approximately 3 dB; with a 12 m cable it is approximately 6 dB. Keep cumulative insertion loss below the AP/client receiver sensitivity margin (~10 dB) to avoid throughput degradation.

6. Backbone Switch Selection and IGMP Snooping

The W780 AP must uplink into a managed switch. The recommended Siemens switches are the SCALANCE XC-300, XR-300, X-300, or X-400 family because they expose the IGMP/IGMP Snooping/MRP/VLAN feature set required for industrial multicast. Third-party managed switches from Hirschmann, Stratix (Allen-Bradley), or N-Tron are acceptable when the same IGMP Snooping v2/v3 and QoS feature set is present.

Configuration of the uplink switch for an EtherNet/IP wireless segment:

  1. Enable IGMP Snooping globally.
  2. Configure the W780 AP uplink port as a multicast-router port (mrouter port). Without this, multicast CIP I/O is dropped at the switch.
  3. Set the querier interval to 125 s (default is fine for typical RPI > 100 ms).
  4. For CIP I/O with RPI < 20 ms, lower the querier interval to 30 s and disable fast-leave on non-CIP ports.
  5. Optionally enable VLAN tagging (IEEE 802.1Q) to separate the wireless segment from the rest of the plant VLAN.
Critical: An unmanaged switch on the AP uplink will silently drop or flood CIP multicast, producing intermittent I/O timeouts that look like radio problems. Always use a managed switch with IGMP Snooping and explicitly mark the AP uplink as an mrouter port.

7. EtherNet/IP over Wireless — Throughput and Timing

EtherNet/IP explicit (TCP, unicast) and implicit (UDP, multicast) traffic behave differently on a WLAN segment:

Traffic Class Transport Bandwidth Demand Wireless Sensitivity
CIP Explicit Messaging TCP/44818, unicast Low (kbps) Insensitive to RF retransmits
CIP Class 0/1 I/O UDP/2222, multicast Per-connection: ~10-50 kbps at 10-50 ms RPI Loss-sensitive; retransmits break RPI jitter
CIP Safety (CIP Safety over EtherNet/IP) UDP/2222, multicast, black-channel Deterministic Requires dedicated VLAN and bandwidth reservation
Web diagnostics (HTTPS) TCP/443 Bursty Schedule outside CIP windows

Two clients running modest EtherNet/IP I/O typically consume well under 5 Mbps aggregate, which is well within the 802.11n throughput envelope of a W780 AP. The risk is not bandwidth, it is jitter: a single 802.11 retransmit at the MAC layer can shift an RPI by one slot. To minimize jitter, set the wireless channel to a non-overlapping channel (1, 6, or 11 in 2.4 GHz), fix the channel width to 20 MHz instead of 40 MHz, and disable background scanning on the client modules.

ProfiNet is more time-critical than EtherNet/IP and is rarely carried over W780/W740 in mixed-mode deployments; if the plant later adds ProfiNet, evaluate the SCALANCE W760/W770 product lines or a dedicated W78x wireless segment.

8. Initial Commissioning — Primary Setup Tool (PST)

SCALANCE W780/W740 devices ship without an IP address. The Primary Setup Tool (PST) is the standard Siemens utility for initial IP assignment, and it is free of charge. An alternative is the STEP 7 "Edit Ethernet Node" function, but PST is generally faster because it does not require a STEP 7 project.

Procedure:

  1. Download the Primary Setup Tool (current build as of firmware v6.5: PST v3.2 or newer). Launch the installer; no STEP 7 / TIA Portal license is required.
  2. Connect the configuration PC directly to the SCALANCE W780 AP via a patch cable (or through the managed uplink switch with the AP powered).
  3. Set the PC Ethernet adapter to DHCP so the PST can find the device on the link-local subnet.
  4. Start the PST. Click Search; the tool issues a Layer-2 discovery broadcast that the SCALANCE responds to even with no IP configured.
  5. Select the discovered device, then click Configure. Assign a static IPv4 address, subnet mask, and default gateway. Use a dedicated address range reserved for the wireless segment (for example, 192.168.10.0/24).
  6. Click Load; the device reboots with the new IP. Allow 30-60 seconds for the WLAN AP to come back online.
  7. Repeat the procedure for each W740 client module before mounting them.

For projects in TIA Portal, the same IP can be assigned via the device's online interface (Project tree > Online > Accessible nodes > Assign PROFINET device name / IP). For projects in STEP 7 V5, the integrated Edit Ethernet Node tool performs the same function but is less convenient for batch assignment.

9. Web-Based Management

Once the IP address is set, all further configuration is performed through the SCALANCE W780/W740 web interface (HTTPS, TCP/443). The default credentials are admin / admin and must be changed on first login. The web UI exposes the following configuration groups relevant to an EtherNet/IP application:

  • WLAN > Basic: SSID, country code (regulatory domain), channel, channel width (force 20 MHz for determinism), transmit power.
  • WLAN > Security: WPA2-PSK or, preferably, WPA2-Enterprise with a RADIUS server for production deployments.
  • WLAN > AP Mode: confirm the device is in "Access Point" mode, not "Client" mode. Each W740 client is configured in "Client" mode.
  • Layer 2 > VLAN: tag the wireless traffic to a dedicated VLAN ID matching the uplink switch.
  • Layer 2 > Spanning Tree: enable STP/RSTP on the wired side; disable on the radio side to avoid topology-change-induced reconverges.
  • System > Time: configure NTP or SNTP to align diagnostic timestamps with the PLC clock.

For two clients on a single AP, configure the same SSID, security profile, and VLAN on both W746-1 / W746-1PRO clients. The AP will authenticate and bridge each client independently.

10. Bandwidth Sizing — Worked Example

Assume a topology of one W788-1PRO AP, two W746-1PRO clients, and the following per-client load:

  • CIP Class 1 I/O: 16 connections, RPI 20 ms, 8 bytes/connection per direction = 16 × 16 B × 50 = 12.8 kbps per client.
  • CIP explicit messaging: programming terminal, ~50 kbps burst, 5% duty cycle = 2.5 kbps average per client.
  • Diagnostic web access: ~100 kbps burst, 1% duty cycle = 1 kbps average per client.

Aggregate per client: ~16 kbps. Aggregate for two clients: ~32 kbps. This represents well under 1% of the 802.11n nominal throughput (~150 Mbps at 20 MHz, 2x2 MIMO), so the wireless link is not a bottleneck. The bottleneck will be the managed switch mrouter port configuration and the AP's association-table capacity (8-16 simultaneous clients depending on firmware build).

11. Verification and Commissioning Checklist

  1. All devices respond to ping on their assigned IP address from the wired side of the AP uplink switch.
  2. Web interface loads on each W780 AP and W740 client.
  3. W740 client associations are visible in the AP's WLAN > Clients page; RSSI > -70 dBm is typical for a working link.
  4. Uplink switch shows the W780 AP port in the mrouter/IGMP-Snooping static-router list.
  5. EtherNet/IP CIP Class 1 connections establish with zero I/O timeouts over a 24-hour burn-in. Tools: Studio 5000 Logix Designer I/O diagnostic page, Wireshark capture on the uplink port (filter udp.port == 2222).
  6. Roaming is not required for stationary clients; if the client moves, verify iPCF (industrial Point Coordination Function) is enabled and the IETF mode is disabled.
  7. Time is synchronized via NTP; AP and client log timestamps match PLC time within 1 second.

12. Troubleshooting Matrix

Symptom Likely Root Cause Corrective Action
Client does not associate SSID mismatch, country code mismatch, channel width 40 vs 20 Verify SSID, set country code identically on AP and clients, force 20 MHz channel width
Client associates but PLC does not pass I/O Uplink switch mrouter port not set; VLAN mismatch Configure static mrouter on the W780 uplink port; align VLAN IDs
Intermittent CIP timeouts every 30-60 s IGMP querier expiring multicast group Lower querier interval to 30 s; ensure W780 port is mrouter
Slow web interface, file transfers < 1 Mbps Wrong antenna polarity or RSSI < -80 dBm Re-survey RF; replace omni with directional antenna; shorten extension cable
AP web page reports "client limit reached" More than maximum concurrent associations Add a second AP on a non-overlapping channel and load-balance clients
PST cannot find the device PC firewall blocking broadcast, or PC on different VLAN Disable Windows Defender firewall temporarily; connect PC to a port on the same VLAN as the AP

Can a single SCALANCE W780 access point serve two clients running EtherNet/IP?

Yes. A W788-1PRO or W784-1 can support two W746-1/W746-1PRO clients without issue. EtherNet/IP uses modest bandwidth compared with ProfiNet, and the AP's client-association capacity is sized for this scenario. The key configuration point is that the managed uplink switch must mark the W780 port as an IGMP Snooping mrouter port so that CIP multicast is forwarded correctly.

Should I use the W746-1PRO or the W744-1PRO client?

Use the W746-1PRO. The W746-1PRO supports multiple Ethernet nodes downstream on its wired port, while the W744-1PRO is a legacy single-node variant. For an application where the client radio serves a PLC plus an HMI or a remote I/O drop on the same cable run, the W746-1PRO is the correct selection.

Is the Primary Setup Tool required, or can I use STEP 7 to assign the IP address?

Both work. The Primary Setup Tool is free and does not require a STEP 7 or TIA Portal license, so it is the preferred method for initial bench commissioning. STEP 7 V5 "Edit Ethernet Node" and TIA Portal "Online > Accessible nodes > Assign IP" can perform the same function when the device will be integrated into a STEP 7 or TIA project. There is no BootP-only path; both PST and STEP 7 use the SCALANCE DCP (Discovery and Configuration Protocol) discovery mechanism.

Do the W788-1PRO and W746-1PRO include antennas, or do I need to order them separately?

The W788-1PRO and W746-1PRO ship with integrated R-SMA diversity omni-directional antennas. The W784-1, W786-1, and W746-1 (IP30 cabinet variants) require external antennas ordered separately. For point-to-point long-range links, a directional Yagi or panel antenna on the external-antenna models is recommended.

Which firmware version should I run on the W780/W740 for a modern EtherNet/IP deployment?

For new deployments, install the latest stable firmware v6.5.x or newer available from Siemens Product Support. Newer firmware adds updated 802.11n radio drivers, current security profiles, and improved diagnostics in the web interface. When upgrading, verify country-code settings are preserved, and back up the device configuration via System > Load/Save in the web UI before flashing.

Back to blog