Siemens CP 1243-1 Operating Instructions Manual

Siemens CP 1243-1 Operating Instructions Manual

Communications processor for connecting the simatic s7-1200 to control center systems
Table of Contents

Advertisement

SIMATIC NET
S7-1200 - TeleControl
CP 1243-1
Operating Instructions
04/2017
C79000-G8976-C365-03
___________________
Preface
___________________
Application and properties
___________________
LEDs and connectors
___________________
Installation, connecting up,
commissioning
___________________
Configuration
___________________
Program blocks
___________________
Diagnostics and upkeep
___________________
Technical data
___________________
Approvals
___________________
Dimension drawings
___________________
Documentation references
1
2
3
4
5
6
7
A
B
C

Advertisement

Table of Contents
loading

Summary of Contents for Siemens CP 1243-1

  • Page 1 ___________________ Preface ___________________ Application and properties ___________________ SIMATIC NET LEDs and connectors ___________________ Installation, connecting up, commissioning S7-1200 - TeleControl CP 1243-1 ___________________ Configuration ___________________ Program blocks Operating Instructions ___________________ Diagnostics and upkeep ___________________ Technical data ___________________ Approvals ___________________ Dimension drawings...
  • Page 2 Note the following: WARNING Siemens products may only be used for the applications described in the catalog and in the relevant technical documentation. If products and components from other manufacturers are used, these must be recommended or approved by Siemens. Proper transport, storage, installation, assembly, commissioning, operation and maintenance are required to ensure that the products operate safely and without any problems.
  • Page 3: Preface

    Hardware product version 2 Firmware version V3.0 The CP 1243-1 is the communications processor for connecting the SIMATIC S7-1200 to control center systems via the public infrastructure (e.g. DSL). With the help of VPN technology and the firewall, the CP allows protected access to the S7-1200.
  • Page 4 You will find the MAC address under the lower hinged cover of the housing. Product names and abbreviations ● CP / submodule / module These abbreviations are used below instead of the full product name CP 1243-1: ● TCSB This abbreviation ill be used below for the "TeleControl Server Basic", version V3.
  • Page 5 Preface Replaced manual issue Edition 12/2016 Current manual release on the Internet You will find the current version of this manual on the Internet pages of Siemens Industry Online Support: Link: (https://support.industry.siemens.com/cs/ww/en/ps/15922/man) Required experience To install, commission and operate the CP, you require experience in the following areas: ●...
  • Page 6 Siemens contact. Keep to the local regulations. You will find information on returning the product on the Internet pages of Siemens Industry Online Support: Link: (https://support.industry.siemens.com/cs/ww/en/view/109479891) Training, Service &...
  • Page 7: Table Of Contents

    Installing, connecting up and commissioning ................. 34 Note on operation ........................36 Configuration ............................37 Security recommendations ..................... 37 Configuration in STEP 7 ......................40 Addressing and authentication ....................41 4.3.1 TeleControl Basic ........................41 CP 1243-1 Operating Instructions, 04/2017, C79000-G8976-C365-03...
  • Page 8 Data point configuration ......................82 4.10.2 Syntax of the data point names ..................... 88 4.10.3 Datapoint types ........................89 4.10.4 Configuration of the data point index ..................94 4.10.5 Status IDs of the data points ....................95 CP 1243-1 Operating Instructions, 04/2017, C79000-G8976-C365-03...
  • Page 9 Processing status of e-mails ....................126 Downloading firmware ......................129 Module replacement ......................132 Technical data ............................ 133 Technical specifications of the CP 1243-1................133 Pinout of the Ethernet interface .................... 134 Approvals ............................135 Dimension drawings ..........................139 Documentation references ........................141 Index..............................
  • Page 10 Table of contents CP 1243-1 Operating Instructions, 04/2017, C79000-G8976-C365-03...
  • Page 11: Application And Properties

    You will find the requirements and functions in the section E-mail configuration (Page 69). ● S7 communication and PG/OP communication with the following functions: – PUT/GET as client and server for data exchange with S7 stations – PG functions – Operator control and monitoring functions (HMI) CP 1243-1 Operating Instructions, 04/2017, C79000-G8976-C365-03...
  • Page 12: Other Services And Properties

    – After a request by the master or an OPC client connected to TCSB – Unsolicited, triggered by various selectable criteria ● Analog value processing Analog values can be preprocessed on the CP according to various methods. CP 1243-1 Operating Instructions, 04/2017, C79000-G8976-C365-03...
  • Page 13: Security Functions

    ● Data espionage ● Data manipulation ● Unauthorized access Secure underlying networks can be operated via additional Ethernet/PROFINET interfaces of the CPU. The security functions can be used independently of telecontrol communication. CP 1243-1 Operating Instructions, 04/2017, C79000-G8976-C365-03...
  • Page 14 To allow monitoring, events can be stored in log files that can be read out using the configuration tool or can be sent automatically to a Syslog server. ● STARTTLS / SMTPS For the secure transfer of e-mails ● NTP (secure) For secure transfer during time-of-day synchronization CP 1243-1 Operating Instructions, 04/2017, C79000-G8976-C365-03...
  • Page 15: Configuration Limits And Performance Data

    – To up to four non-redundant or redundant IEC masters With the Telecontrol Basic protocol, in addition to this, inter-station communication with up to 15 S7 stations with a CP 1243-1 can be operated via the telecontrol server. CP 1243-1...
  • Page 16 ● Sending of up to 10 messages (e-mails) can be configured with the message editor. ● Sending e-mails via the TMAIL_C program block IPsec tunnel (VPN) Up to 8 IPsec terminals can be established for secure communication with other security modules. CP 1243-1 Operating Instructions, 04/2017, C79000-G8976-C365-03...
  • Page 17: Configuration Examples

    ● Maximum 128 rules with limitation of the transmission speed ("Bandwidth limitation") Configuration examples 1.6.1 Sending e-mails Configuration with sending of e-mails: The following example shows a configuration with sending of e-mails. The telecontrol communication of the CP is dsiabled. Figure 1-1 Sending e-mails CP 1243-1 Operating Instructions, 04/2017, C79000-G8976-C365-03...
  • Page 18: Telecontrol Basic

    The telecontrol server monitors the connections established by the remote stations. ● Inter-station communication Stations of the same type, for example S7-1200 with CP 1243-1, can communicate with each other by sending the frames via the telecontrol server. CP 1243-1...
  • Page 19 Telecontrol with a redundant master station (TCSB) The following figure shows a possible configuration with S7 stations communicating with a redundant master station (TCSB). Figure 1-3 S7 station communication with a redundant a master station CP 1243-1 Operating Instructions, 04/2017, C79000-G8976-C365-03...
  • Page 20: Dnp3 / Iec

    1 IP subnet. In this example, the DNP3 protocol is used; in other words, the stations are equipped with a CP 1243-1. A configuration in which the IEC protocol is used would have the same setup.
  • Page 21: Configuration With Connections Over The Internet

    As an alternative to the router SCALANCE 812, you can also use a standard DSL modem and establish the VPN connection with a security module SCALANCE S. Addressing Refer to the information in the section DNP3 / IEC (Page 41). CP 1243-1 Operating Instructions, 04/2017, C79000-G8976-C365-03...
  • Page 22: Configuration With A Redundant Control Center

    Configuration example with a redundant DNP3 master station Addressing of the redundant DNP3 master The two devices of the redundant DNP3 master in the control center are addressed by the CP using one DNP3 address but two different IP addresses. CP 1243-1 Operating Instructions, 04/2017, C79000-G8976-C365-03...
  • Page 23: Requirements For Use

    Engineering station with STEP 7 1.7.2 Software requirements Software for configuration and online functions To configure and use the CP, the following configuration tool is required: ● STEP 7 Basic / Professional V14.0 SP1 CP 1243-1 Operating Instructions, 04/2017, C79000-G8976-C365-03...
  • Page 24 Application and properties 1.7 Requirements for use CP 1243-1 Operating Instructions, 04/2017, C79000-G8976-C365-03...
  • Page 25: Leds And Connectors

    Open the upper or lower cover of the housing by pulling it down or up as shown by the arrows in the illustration. The covers extend beyond the housing to give you a grip. Figure 2-1 Opening the covers of the housing CP 1243-1 Operating Instructions, 04/2017, C79000-G8976-C365-03...
  • Page 26: Leds

    LED colors and illustration of the LED statuses The LED symbols in the following tables have the following significance: Table 2- 3 Meaning of the LED symbols Symbol LED status ON (steady light) Flashing Not relevant CP 1243-1 Operating Instructions, 04/2017, C79000-G8976-C365-03...
  • Page 27 Running (RUN) without serious error green Partner not connected • Firmware loaded successfully • flashing green Starting up • Module fault • flashing red Invalid STEP 7 project data • Error loading firmware flashing red-green CP 1243-1 Operating Instructions, 04/2017, C79000-G8976-C365-03...
  • Page 28 IP address being obtained. • No connection to Industrial Ethernet Connection to communications partners Connection established to at least one partner green Partner reachable, CPU in STOP mode green Partner not reachable flashing green CP 1243-1 Operating Instructions, 04/2017, C79000-G8976-C365-03...
  • Page 29 No VPN connection configured on the CP Loading firmware Loading firmware. The DIAG LED flashes alternating red and green. Firmware was successfully loaded. flashing green Error loading firmware flashing red CP 1243-1 Operating Instructions, 04/2017, C79000-G8976-C365-03...
  • Page 30: Electrical Connectors

    The Ethernet connector is located behind the lower hinged cover of the module. The interface is an RJ-45 jack according to IEEE 802.3. The pin assignment and other data relating to the Ethernet interface can be found in the section Technical data (Page 133). CP 1243-1 Operating Instructions, 04/2017, C79000-G8976-C365-03...
  • Page 31: Installation, Connecting Up, Commissioning

    3.1.1 Notices on use in hazardous areas WARNING EXPLOSION HAZARD DO NOT OPEN WHEN ENERGIZED. WARNING The device may only be operated in an environment with pollution degree 1 or 2 (see IEC 60664-1). CP 1243-1 Operating Instructions, 04/2017, C79000-G8976-C365-03...
  • Page 32: Notices On Use In Hazardous Areas According To Iecex / Atex

    80 °C, special precautions must be taken. If the equipment is operated in an air ambient in excess of 50 °C, only use cables with admitted maximum operating temperature of at least 80 °C. CP 1243-1 Operating Instructions, 04/2017, C79000-G8976-C365-03...
  • Page 33: Notices Regarding Use In Hazardous Areas According To Ul Hazloc

    The equipment is intended to be installed within an ultimate enclosure. The inner service temperature of the enclosure corresponds to the ambient temperature of the module. Use installation wiring connections with admitted maximum operating temperature of at least 30 ºC higher than maximum ambient temperature. CP 1243-1 Operating Instructions, 04/2017, C79000-G8976-C365-03...
  • Page 34: Installing, Connecting Up And Commissioning

    Turning off the station when plugging/pulling the module Before pulling or plugging the module, always turn off the power supply to the station. Dimensions for installation Figure 3-1 Dimensions for installation of the S7-1200 CP 1243-1 Operating Instructions, 04/2017, C79000-G8976-C365-03...
  • Page 35 30 mm 15 mm faces (examples) CP 1242-7, CP 1243-1, CP 1243-7, CP 1243-8 IRC 30 mm 15 mm * Width B: The distance between the edge of the housing and the center of the hole in the DIN rail mounting clip You will find detailed dimensions of the module in the section Dimension drawings (Page 139).
  • Page 36: Note On Operation

    Close the front covers of the module and keep them closed during operation. Note on operation NOTICE Closing the front panels To ensure interference-free operation, keep the front panels of the module closed during operation. CP 1243-1 Operating Instructions, 04/2017, C79000-G8976-C365-03...
  • Page 37: Configuration

    ● Keep the firmware up to date. Check regularly for security updates of the firmware and use them. ● Check regularly for new features on the Siemens Internet pages. – Here you will find information on network security: Link: (http://www.siemens.com/industrialsecurity) –...
  • Page 38 – The NTP protocol provides a secure alternative with NTP (secure) if you do not use telecontrol communication. – The HTTP protocol provides a secure alternative with HTTPS when accessing the Web server (configuration of the CPU). CP 1243-1 Operating Instructions, 04/2017, C79000-G8976-C365-03...
  • Page 39 Closed Open after configuration SNMP 161 (UDP) Open Open after configuration Yes (with SNMPv3) * For information on avoiding opening the port during diagnostics, see section Online security diagnostics via port 8448 (Page 123). CP 1243-1 Operating Instructions, 04/2017, C79000-G8976-C365-03...
  • Page 40: Configuration In Step 7

    When you load the station, the project data of the station including the configuration data of the CP is stored on the CPU. You will find information on loading the station in the STEP 7 information system. CP 1243-1 Operating Instructions, 04/2017, C79000-G8976-C365-03...
  • Page 41: Addressing And Authentication

    ● Address of the master – IP address – Name that can be resolved with DNS If you use DNS, there must be a DNS server (see below) and this must be reachable for the CP. CP 1243-1 Operating Instructions, 04/2017, C79000-G8976-C365-03...
  • Page 42: Time-Of-Day Synchronization

    Recommendation for setting the time Synchronization with a external clock at intervals of approximately 10 seconds is recommended. This achieves as small a deviation as possible between the internal time and the absolute time. CP 1243-1 Operating Instructions, 04/2017, C79000-G8976-C365-03...
  • Page 43 Here you create the configuration under the following conditions: – Telecontrol communication is disabled. – The security functions are disabled. ● Security Here you create the configuration under the following condition: – The security functions are enabled. CP 1243-1 Operating Instructions, 04/2017, C79000-G8976-C365-03...
  • Page 44 Only this option can be configured actively for the CPU: ● Time from CP The CPU adopts the time of day from a CP of the station if time forwarding from the CP to the CPU is enabled (see below). CP 1243-1 Operating Instructions, 04/2017, C79000-G8976-C365-03...
  • Page 45: Communication Types

    – TeleControl Basic – DNP3 – IEC 60870-5 Note that if you change the telecontrol communication type later, all specific parameters are deleted. These also include data point and partner information among other things. CP 1243-1 Operating Instructions, 04/2017, C79000-G8976-C365-03...
  • Page 46: Ethernet Interface

    The station address is the “common address of the ASDU" or the address of the information object. Entry of the station address (digits only). Permitted range of values: 1...65534. 4.6.2 Time-of-day synchronization Time-of-day synchronization For the configuration of the time-of-day synchronization read the section Time-of-day synchronization (Page 42). CP 1243-1 Operating Instructions, 04/2017, C79000-G8976-C365-03...
  • Page 47: Advanced Options

    The monitoring time is configured for the Ethernet interface as a global setting for all TCP connections. – The parameter below "Partner stations" As with the TCP connection monitoring time, the value of "Partner stations" can be adapted for each partner individually. CP 1243-1 Operating Instructions, 04/2017, C79000-G8976-C365-03...
  • Page 48: Transmission Settings - Telecontrol Basic

    CP and telecontrol server after which the CP sends a watchdog frame to the telecontrol server. The watchdog cycle is only configured with TCSB (parameter "Keepalive monitoring time"). CP 1243-1 Operating Instructions, 04/2017, C79000-G8976-C365-03...
  • Page 49: Transmission Settings - Dnp3

    Permitted range: 0 ... 255 Default setting: 0 If you enter 0 (zero), the function is disabled. ● Connection confirmation Condition for the CP to request a connection confirmation from the master (never, always, only with segmented frames). CP 1243-1 Operating Instructions, 04/2017, C79000-G8976-C365-03...
  • Page 50 Selection of an event class in which only the last current values are stored in the send buffer. In the default setting all values of events of classes 1 and 2 are stored in the send buffer, of class 3 only the current values (image memory procedure). CP 1243-1 Operating Instructions, 04/2017, C79000-G8976-C365-03...
  • Page 51: Transmission Settings - Iec

    Settings on the master When configuring the monitoring times t and t make sure that you make the corresponding settings on the master so that there are no unwanted error messages or connection aborts. CP 1243-1 Operating Instructions, 04/2017, C79000-G8976-C365-03...
  • Page 52 Maximum number of received data frames (I-APDUs), after which the oldest frame received from the master must be acknowledged. Permitted range: 1..8 Default setting: 8 The value must be less than the value of "Difference between send and receive sequence number" (k). CP 1243-1 Operating Instructions, 04/2017, C79000-G8976-C365-03...
  • Page 53: Snmp

    Read and write access private *) Note the use of lowercase letters! ● SNMPv3 Available only when security functions are enabled For information on the configuring SNMPv3, refer to the section SNMP (Page 70). CP 1243-1 Operating Instructions, 04/2017, C79000-G8976-C365-03...
  • Page 54: Partner Stations

    By enabling the option the master that can then be configured is enabled for communication. ● Partner number The partner number is assigned by the system. It is required during data point configuration to assign data points to their communications partners. CP 1243-1 Operating Instructions, 04/2017, C79000-G8976-C365-03...
  • Page 55 The value set here for the partner overwrites the global value that was set in the "Ethernet interface (X1) > Advanced options > TCP connection monitoring" parameter group. CP 1243-1 Operating Instructions, 04/2017, C79000-G8976-C365-03...
  • Page 56 In the "Permanent" connection mode, there is a permanent connection to the communications partner. The CP only supports this connection mode. ● Connection establishment Specifies the communications partner that establishes the connection (always the CP). CP 1243-1 Operating Instructions, 04/2017, C79000-G8976-C365-03...
  • Page 57: Telecontrol Basic

    IP address of the TCSB server PCs (internal network). Only the public IP address is reachable from the Internet. The station does not therefore receive any information telling it which of the two computers of the redundancy group it is connected to. CP 1243-1 Operating Instructions, 04/2017, C79000-G8976-C365-03...
  • Page 58: Advanced Settings

    Here, enter the project number of the CP in the partner station. (Parameter group "Security > CP identification" on the partner) Station Here, enter the station number of the CP in the partner station. (Parameter group "Security > CP identification" on the partner) CP 1243-1 Operating Instructions, 04/2017, C79000-G8976-C365-03...
  • Page 59: Dnp3 / Iec

    The selection of the level used by the DNP3 CP which must correspond to that of the connected master is set separately in STEP 7 for each individual communications partner (DNP3 master). CP 1243-1 Operating Instructions, 04/2017, C79000-G8976-C365-03...
  • Page 60 Using the first three parameters you specify the CPU access by the CP in the CPU scan cycle. You will find the structure of the CPU scan cycle in the section Read cycle (Page 96). CP 1243-1 Operating Instructions, 04/2017, C79000-G8976-C365-03...
  • Page 61 CP time of day ● CP time to CPU Using this function, the CP can make its time of day available to the CPU. You will find details in the STEP 7 information system. CP 1243-1 Operating Instructions, 04/2017, C79000-G8976-C365-03...
  • Page 62 PLC tag (data type DTL) for the date on which the CP was last unable to log in to the telecontrol server. ● TeleService status The PLC tag (BOOL) indicates whether a TeleService session is active. – 0 = No TeleService session active – 1 = TeleService session active CP 1243-1 Operating Instructions, 04/2017, C79000-G8976-C365-03...
  • Page 63: Security

    ● E-mail configuration See section E-mail configuration (Page 69). ● Log settings Here you make the settings for logging events relevant for security. See section Log settings - Filtering of the system events (Page 70). CP 1243-1 Operating Instructions, 04/2017, C79000-G8976-C365-03...
  • Page 64: Cp Iidentifcation With The Telecontrol Basic Protocol

    The parameter of the type DWORD is allocated as follows: – Bits 0 - 7: Slot – Bits 8 to 20: Station number – Bits 21 to 31: Project number CP 1243-1 Operating Instructions, 04/2017, C79000-G8976-C365-03...
  • Page 65: Dnp3 Security Options

    CP and sent to the master for further evaluation. Range of values: – Do not send security statistics – Send security statistics Default setting: Do not send security statistics CP 1243-1 Operating Instructions, 04/2017, C79000-G8976-C365-03...
  • Page 66 If the configured number of statistics queries of the master is exceeded within the key exchange interval, the CP enters a message in the diagnostics buffer of the CPU. Range of values: 2...255 Default setting: 5 CP 1243-1 Operating Instructions, 04/2017, C79000-G8976-C365-03...
  • Page 67: Firewall

    Each incoming or outgoing frame initially runs through the MAC firewall (layer 2). If the frame is discarded at this level, it will not be checked by the IP firewall (layer 3). This means that with suitable MAC firewall rules, IP communication can be restricted or blocked. CP 1243-1 Operating Instructions, 04/2017, C79000-G8976-C365-03...
  • Page 68: Notation For The Source Ip Address (Advanced Firewall Mode)

    4. Now select the CP in the S7 station. 5. Enable the advanced firewall mode in the local security settings of the CP in the "Security > Firewall" parameter group. 6. Open the "IP rules" parameter group. CP 1243-1 Operating Instructions, 04/2017, C79000-G8976-C365-03...
  • Page 69: E-Mail Configuration

    Recommendation: If your e-mail provider offers both options (STARTTLS / SSL/TLS), you should use STARTTLS with port 587. ● Port no. 465 By using SSL/TLS (SMTPS), the module sends encrypted e-mails to the SMTP server of your e-mail service provider. CP 1243-1 Operating Instructions, 04/2017, C79000-G8976-C365-03...
  • Page 70: Log Settings - Filtering Of The System Events

    If the option is enabled, communication via SNMP is released on the device. As default, SNMPv1 is enabled. If the option is disabled, queries from SNMP clients are not replied to either via SNMPv1 or via SNMPv3. CP 1243-1 Operating Instructions, 04/2017, C79000-G8976-C365-03...
  • Page 71 SNMP. For new roles, you can freely configure individual rights. You will find information on users, roles and the password policy in the information system of STEP 7. CP 1243-1 Operating Instructions, 04/2017, C79000-G8976-C365-03...
  • Page 72: Certificate Manager

    If you use communication with authentication for the module, for example SSL/TLS for secure transfer of e-mails, certificates are required. You need to import certificates of non- Siemens communications partners into the STEP 7 project and download them to the module with the configuration data: 1.
  • Page 73 Configuration 4.9 Security So that the CP can communicate with non-Siemens partners when the security functions are enabled, the relevant certificates of the partners must be exchanged during communication. To supply the CP with third-party certificates, follow the steps below: 1.
  • Page 74: Vpn

    (HTTP, FTP etc.). The data traffic between two network components is transported practically unrestricted through another network. This allows entire networks to be connected together via a neighboring or intermediate network. CP 1243-1 Operating Instructions, 04/2017, C79000-G8976-C365-03...
  • Page 75 ● Secure connections via non-secure network structures becomes possible. Due to the combination of different security measures such as firewall, NAT/NAPT routers and VPN via IPsec tunnels, security modules protect against the following: ● Data espionage ● Data manipulation ● Unwanted access CP 1243-1 Operating Instructions, 04/2017, C79000-G8976-C365-03...
  • Page 76: Creating A Vpn Tunnel For S7 Communication Between Stations

    2. Enter the user name, password and confirmation of the password. 3. Click the "Logon" button. You have created a new security user. The security functions are now available to you. With all further logons, log on as user. CP 1243-1 Operating Instructions, 04/2017, C79000-G8976-C365-03...
  • Page 77 2. Enter a name for the VPN group. Configure the settings of the VPN group in the properties. These properties define the default settings of the VPN group that you can change at any time. CP 1243-1 Operating Instructions, 04/2017, C79000-G8976-C365-03...
  • Page 78: Vpn Communication With Softnet Security Client (Engineering Station)

    4. Select the lower-level node in the tunnel list. 5. With the right mouse button, select "Delete entry" in the shortcut menu. Result: The lower-level node is now fully disabled. VPN tunnel communication can be established. CP 1243-1 Operating Instructions, 04/2017, C79000-G8976-C365-03...
  • Page 79: Creating The Vpn Connection Telecontrol Server

    ● To set up the security functions you then have the following alternative options: – Install a CP 1628 (security module) on the computer of the telecontrol server and assign the CP 1243-1 and the CP 1628 to the same security group in the configuration.
  • Page 80: Syslog

    You configure the following information here: ● Address of the telecontrol server IP address or name of the telecontrol server that can be resolved by DNS. ● Port Port number of the telecontrol server CP 1243-1 Operating Instructions, 04/2017, C79000-G8976-C365-03...
  • Page 81 6. The available rights are displayed in the "List of rights" table. The right "Use TeleService" is displayed. 7. Enable the "Use TeleService" right for the module. 8. Following this, set the S7 protocol to "allow" in Firewall. CP 1243-1 Operating Instructions, 04/2017, C79000-G8976-C365-03...
  • Page 82: Data Points

    You configure the data points in STEP 7 in the data point and message editor. You can find this using the project tree: Project > directory of the relevant station > Local modules > CP CP 1243-1 Operating Instructions, 04/2017, C79000-G8976-C365-03...
  • Page 83 Figure 4-3 Data point table You configure the remaining properties of every object using the drop-down lists of the other table columns and using the parameter boxes shown at the bottom of the screen. CP 1243-1 Operating Instructions, 04/2017, C79000-G8976-C365-03...
  • Page 84 The sorting is indicated by an arrow in the column header. After sorting in descending order of a column the sorting can be turned off by clicking on the column header again. CP 1243-1 Operating Instructions, 04/2017, C79000-G8976-C365-03...
  • Page 85 When you call the export function, the export dialog opens. Here, you select the module or modules of the project whose data point information needs to be exported. When necessary, you can export the data points of all modules of the project at one time. CP 1243-1 Operating Instructions, 04/2017, C79000-G8976-C365-03...
  • Page 86 ● Line 4: Parameter names (English) of the data points This line must not be changed. ● Lines 5..n: Values of the parameters according to line 4 of the individual data points You can change the parameter values for the particular station. CP 1243-1 Operating Instructions, 04/2017, C79000-G8976-C365-03...
  • Page 87 ● The telecontrol protocol used by the module differs from that of the original module. Only when importing into several modules: ● The import is aborted when a module or CPU name is different from the data in the CSV file. CP 1243-1 Operating Instructions, 04/2017, C79000-G8976-C365-03...
  • Page 88: Syntax Of The Data Point Names

    Modules with the same telecontrol protocol are compatible with each other: ● TeleControl Basic All SIMATIC NET modules with the TeleControl Basic protocol: CP 1243-1, CP 1242-7 GPRS V2, CP 1243-7 LTE, CP 1542SP-1 IRC ● ST7 CP 1243-8 IRC, TIM modules capable of ST7 ●...
  • Page 89: Datapoint Types

    The following S7 data types are compatible components of ARRAY: ● Byte, USInt (total of up to 64 per data block) ● Char (total of up to 64 per data block) - CP as of firmware version 2.1.77 CP 1243-1 Operating Instructions, 04/2017, C79000-G8976-C365-03...
  • Page 90 Analog Input Event 32 [1] DInt Q, M, DB Analog Output Sta- 40 [1, 3] DInt Q, M, DB Analog Output 41 [1] DInt Q, M, DB Analog Output 42 [1] DInt Q, M, DB Event CP 1243-1 Operating Instructions, 04/2017, C79000-G8976-C365-03...
  • Page 91 On the DNP3 CP as Binary Command (12 [1]) On the master as Binary Output (10 [2]) With the data point types Binary Output Event (11) and Analog Output Event (42), you also need to enable mirroring; refer to the next section. CP 1243-1 Operating Instructions, 04/2017, C79000-G8976-C365-03...
  • Page 92 Set point command, scaled value <49> Q, M, DB Set point command, normalised <61> Q, M, DB value with time tag CP56Time2a Set point command, scaled value <62> Q, M, DB with time tag CP56Time2a CP 1243-1 Operating Instructions, 04/2017, C79000-G8976-C365-03...
  • Page 93 Format of the time stamp Time stamps are transferred according to the IEC specification in the "CP56Time2a" format. Note that in the frames only the first 3 bytes for milliseconds and minutes are transferred. CP 1243-1 Operating Instructions, 04/2017, C79000-G8976-C365-03...
  • Page 94: Configuration Of The Data Point Index

    Data point index with the IEC protocol The data point indexes must be unique in a CP. Data point indexes assigned twice are indicated as errors in the consistency check and prevent the project being saved. CP 1243-1 Operating Instructions, 04/2017, C79000-G8976-C365-03...
  • Page 95: Status Ids Of The Data Points

    S7 flow before log prepro- after start address reading the cessing unreachable value overshot / undershot (always Bit status CP 1243-1 Operating Instructions, 04/2017, C79000-G8976-C365-03...
  • Page 96: Read Cycle

    Less important input data points do not need to be read in every CPU scan cycle. Important input data points, on the other hand, can be prioritized for updating in every CPU scan cycle. CP 1243-1 Operating Instructions, 04/2017, C79000-G8976-C365-03...
  • Page 97: Process Image, Type Of Transmission, Event Classes, Triggers

    The values of data points are stored in the image memory of the CP and transferred only when queried by the communications partner. Events are also stored in the frame memory (send buffer) and can be transferred unsolicited. CP 1243-1 Operating Instructions, 04/2017, C79000-G8976-C365-03...
  • Page 98 When the connection to the communications partner returns, the CP changes back to the send buffer mode as soon as the fill level of the send buffer has fallen below 50%. CP 1243-1 Operating Instructions, 04/2017, C79000-G8976-C365-03...
  • Page 99 Threshold value trigger (Page 101). ● Time trigger The value of the data point is transferred at configurable intervals or at a specific time of day. CP 1243-1 Operating Instructions, 04/2017, C79000-G8976-C365-03...
  • Page 100: Trigger" Tab

    (0 → 1) of a trigger tag is evaluated that is set by the user program. When necessary, a separate trigger tag can be configured for each data point. CP 1243-1 Operating Instructions, 04/2017, C79000-G8976-C365-03...
  • Page 101: Threshold Value Trigger

    Note that the analog value preprocessing is performed before the check for a configured threshold value and before calculating the threshold value. This affects the value that is configured for the threshold value trigger. CP 1243-1 Operating Instructions, 04/2017, C79000-G8976-C365-03...
  • Page 102 The method is explained based on the following example in which a threshold value of 2.0 is configured. CP 1243-1 Operating Instructions, 04/2017, C79000-G8976-C365-03...
  • Page 103: Analog Value Preprocessing

    In these cases, the read process value of the data point is entered in the image memory of the CP before the preprocessing cycle of the threshold value calculation (500 ms) elapses. CP 1243-1 Operating Instructions, 04/2017, C79000-G8976-C365-03...
  • Page 104 Sequence of the analog value preprocessing options The values of analog inputs configured as an event are processed on the CPU according to the following scheme: Figure 4-5 Sequence of the analog value preprocessing CP 1243-1 Operating Instructions, 04/2017, C79000-G8976-C365-03...
  • Page 105 As soon as a value is acquired in the overflow or underflow range, mean value generation is stopped. The value 32767 / 7FFF or -32768 / 8000 is saved as an invalid mean value for the current mean value calculation period and sent with the next message. CP 1243-1 Operating Instructions, 04/2017, C79000-G8976-C365-03...
  • Page 106 If the value returns to the measuring range before the fault suppression time elapses, the current value is transferred. CP 1243-1 Operating Instructions, 04/2017, C79000-G8976-C365-03...
  • Page 107 = smoothing factor The following values can be configured for the module as the smoothing factor. ● 1 = No smoothing ● 4 = Weak smoothing ● 32 = Medium smoothing ● 64 = Strong smoothing CP 1243-1 Operating Instructions, 04/2017, C79000-G8976-C365-03...
  • Page 108 Entry as a decimal number according to the range of values of the assigned PLC tag from the bit memory or data area. The entry of the value 0 (zero) is interpreted as a deactivated limit value. CP 1243-1 Operating Instructions, 04/2017, C79000-G8976-C365-03...
  • Page 109: Command Outputs

    If the analog value fluctuates quickly, it may be useful to smooth the analog value first if limit values are configured. 4.10.11 Command outputs Parameters for command outputs With the DNP3 and IEC protocols, the following parameters can be configured for command outputs: ● LATCH_ON / LATCH_OFF ● PULSE_ON CP 1243-1 Operating Instructions, 04/2017, C79000-G8976-C365-03...
  • Page 110 The output is set permanently The command is rejected. to 0 (as with LATCH_OFF). * Trip-Close Code field ** Operation Type field Parameter Name: Max. number of pulses Range of val- 0 ... 255 ues: CP 1243-1 Operating Instructions, 04/2017, C79000-G8976-C365-03...
  • Page 111 “Max. pulse duration“ is configured. If the value is 0 (zero), no replacement value is used. If the ""Max. pulse duration" and "Pulse duration replacement time" are con- figured with zero, the command is rejected. CP 1243-1 Operating Instructions, 04/2017, C79000-G8976-C365-03...
  • Page 112: Partner Stations

    Activate one of the two options. ● Telecontrol server enabled Only the telecontrol server is a communications partner of the data point. ● Partner for inter-station communication Only the S7 station is a communications partner of the data point. CP 1243-1 Operating Instructions, 04/2017, C79000-G8976-C365-03...
  • Page 113: Messages

    ● Configuring the "E-mail configuration" parameter group (see "Security" parameter group) To do this, you require the following information: – Access data of the SMTP server: Address, port number, user name, password – CP's own e-mail address – Email address of the recipient CP 1243-1 Operating Instructions, 04/2017, C79000-G8976-C365-03...
  • Page 114 Web server of the CPU by displaying the value of the PLC tag there. For the significance of the status output in hexadecimal, refer to the section Processing status of e-mails (Page 126). CP 1243-1 Operating Instructions, 04/2017, C79000-G8976-C365-03...
  • Page 115: Access To The Web Server

    From a PC you can access the Web server of the station via TCSB if the PC is connected to the telecontrol server via LAN. For the requirements, refer to the manual /3/ (Page 142). You will find information on the Web server in the manual /1/ (Page 141). CP 1243-1 Operating Instructions, 04/2017, C79000-G8976-C365-03...
  • Page 116 Configuration 4.12 Access to the Web server CP 1243-1 Operating Instructions, 04/2017, C79000-G8976-C365-03...
  • Page 117: Program Blocks

    Sending and receiving data via TCP or ISOonTCP ● TMAIL_C V4.0 Sending e-mails To transfer encrypted e-mails with this block, the precise time of day is required on the CP. Configure the time-of-day synchronization. CP 1243-1 Operating Instructions, 04/2017, C79000-G8976-C365-03...
  • Page 118 For secure transfer of e-mails addressing the e-mail server using the host name You will find the description of the SDTs with their parameters in the STEP 7 information system under the relevant name. CP 1243-1 Operating Instructions, 04/2017, C79000-G8976-C365-03...
  • Page 119: Changing The Ip Address During Runtime

    ● CPU firmware ≥ V4.2 Requirements - program blocks / STEP 7 versions Program-controlled changing of the IP parameters is supported by program blocks. The program blocks access address data stored in a suitable system data type (SDT). CP 1243-1 Operating Instructions, 04/2017, C79000-G8976-C365-03...
  • Page 120 To be able to change the IP parameters program controlled the option "IP address is set directly at the device" must be enabled in the configuration of the IP address of the Ethernet interface of the CP. CP 1243-1 Operating Instructions, 04/2017, C79000-G8976-C365-03...
  • Page 121: Diagnostics And Upkeep

    Here, you can obtain the following static information on the selected module: ● General information on the module General information on the module ● Diagnostics status Information on the diagnostics status ● Ethernet interface Address and statistical information CP 1243-1 Operating Instructions, 04/2017, C79000-G8976-C365-03...
  • Page 122 The log file is created with the "Save service data" button. The data is saved in a file with the format "*.dmp" that can be evaluated by the Siemens hotline. STEP 7: The partner status The CP can signal the status of the connection to the communications partner to the CPU via a PLC tag.
  • Page 123: Online Security Diagnostics Via Port 8448

    VPN tunnel. Connections between a CP and telecontrol server for transferring user data are not interrupted by a TeleService-connection. The functions and the connection establishment are largely the same with the online functions and TeleService. CP 1243-1 Operating Instructions, 04/2017, C79000-G8976-C365-03...
  • Page 124 Enter the telecontrol password to authenticate the CP with the telecontrol server The telecontrol password for the CP is configured under "CP identification" in the security settings, see also the section CP iIdentifcation with the TeleControl Basic protocol (Page 64). CP 1243-1 Operating Instructions, 04/2017, C79000-G8976-C365-03...
  • Page 125: Snmp

    ● SNMPv1 (standard) ● SNMPv3 (Security) It returns the contents of MIB objects of the standard MIB II according to RFC 1213 and the Siemens Automation MIB. ● MIB II The CP supports the following groups of MIB objects: – System –...
  • Page 126: Processing Status Of E-Mails

    Diagnostics and upkeep 6.5 Processing status of e-mails ● Siemens Automation MIB The following exceptions / restrictions apply to the CP. Write access is permitted only for the following MIB objects of the system group: – sysContact – sysLocation – sysName A set sysName is sent as the host name using DHCP option 12 to the DHCP server to register with a DNS server.
  • Page 127 LOGIN authentication method. Try sending e-mails without authentication (no user name). 8501 Syntax error. Check the following configuration data: Alarm configuration > E-mail data (Content): Recipient address ("To" or "Cc"). • CP 1243-1 Operating Instructions, 04/2017, C79000-G8976-C365-03...
  • Page 128 – Recipient address ("To" or "Cc"). 8554 Transfer failed 85xx Other error message from the e-mail server Apart from the leading "8", the message corresponds to the three-digit error number of the SMTP protocol. CP 1243-1 Operating Instructions, 04/2017, C79000-G8976-C365-03...
  • Page 129: Downloading Firmware

    New firmware versions of the CP If a new firmware version is available for the module, you will find this on the following Internet page of Siemens Industry Online Support: Link: (https://support.industry.siemens.com/cs/ww/en/ps/15922/dl) Note that firmware versions as of V3 cannot be loaded on CPs with hardware product version 1.
  • Page 130 Web server), you can continue as described in the next section "Downloading firmware". If you terminate the connection to the Web server, the next time you can log in with the Web server without downloading the certificate using HTTP. CP 1243-1 Operating Instructions, 04/2017, C79000-G8976-C365-03...
  • Page 131 If you close the Web server during the firmware update, you cannot change the operating status of the CPU to RUN. In this case you need to turn the CPU off and on again to change the CPU to the operating status RUN. CP 1243-1 Operating Instructions, 04/2017, C79000-G8976-C365-03...
  • Page 132: Module Replacement

    CP without needing to download the project data to the station again. When the station starts up again, the new CP reads the project data from the CPU. CP 1243-1 Operating Instructions, 04/2017, C79000-G8976-C365-03...
  • Page 133: Technical Data

    Technical data Technical specifications of the CP 1243-1 Table 7- 1 Technical specifications of the CP 1243-1 Technical specifications Article number 6GK7 243-1BX30-0XE0 Attachment to Industrial Ethernet Quantity Design RJ-45 jack Properties 100BASE-TX, IEEE 802.3-2005, half duplex/full duplex, autocrossover, autonego-...
  • Page 134: Pinout Of The Ethernet Interface

    Table 7- 2 Pin assignment of the Ethernet interface View of the RJ-45 jack Signal name Assignment Transmit data + TD_N Transmit data - Receive data + Ground Ground RD_N Receive data - Ground Ground CP 1243-1 Operating Instructions, 04/2017, C79000-G8976-C365-03...
  • Page 135: Approvals

    Division Process Industries and Drives Process Automation DE-76181 Karlsruhe Germany You will find the EC Declaration of Conformity for this product on the Internet at the following address: Link: (https://support.industry.siemens.com/cs/ww/en/ps/15922/cert) > "EC Declaration of Conformity" CP 1243-1 Operating Instructions, 04/2017, C79000-G8976-C365-03...
  • Page 136 The product meets the requirements if you keep to the following during installation and operation: • The notes in the section Important notes on using the device (Page 31) • The installation instructions in the document /1/ (Page 141) CP 1243-1 Operating Instructions, 04/2017, C79000-G8976-C365-03...
  • Page 137 Class I, Zone 2, Group IIC, Temperature Class T4, Ta = 60 °C Report Number: 3049779, 3049925 Note the conditions for the safe deployment of the CP according to the section Notices on use in hazardous areas according to FM (Page 33). CP 1243-1 Operating Instructions, 04/2017, C79000-G8976-C365-03...
  • Page 138 SIMATIC NET products are regularly submitted to the relevant authorities and approval centers for approvals relating to specific markets and applications. If you require a list of the current approvals for individual devices, consult your Siemens contact or check the Internet pages of Siemens Industry Online Support: Link: (https://support.industry.siemens.com/cs/ww/en/ps/15922/cert)
  • Page 139: Dimension Drawings

    Dimension drawings Note All dimensions in the drawings of the CP are in millimeters. Figure B-1 Front view and side view left CP 1243-1 Operating Instructions, 04/2017, C79000-G8976-C365-03...
  • Page 140 Dimension drawings Figure B-2 From above CP 1243-1 Operating Instructions, 04/2017, C79000-G8976-C365-03...
  • Page 141: Documentation References

    Documentation references Where to find Siemens documentation ● Article numbers You will find the article numbers for the Siemens products of relevance here in the following catalogs: – SIMATIC NET - Industrial Communication / Industrial Identification, catalog IK PI – SIMATIC - Products for Totally Integrated Automation and Micro Automation, catalog...
  • Page 142 Documentation references SIMATIC NET CP 1243-1 Operating Instructions Siemens AG Link: (https://support.industry.siemens.com/cs/ww/en/view/103948898) SIMATIC NET TeleControl Server Basic (Version V3) Operating Instructions Siemens AG Link: (https://support.industry.siemens.com/cs/ww/en/ps/15918/man) SIMATIC NET Industrial Ethernet Security Security basics and applications Configuration manual Siemens AG Link: (https://support.industry.siemens.com/cs/ww/en/ps/15326/man)
  • Page 143: Index

    NTP, 43 NTP (secure), 43 NTP server - program-controlled change, 119 Firewall, 14 IPsec tunnel, Firmware version, 3 Forced image mode, 98 Frame memory, 16, 98 Online diagnostics, 46, 121 Online functions, 13, 121 CP 1243-1 Operating Instructions, 04/2017, C79000-G8976-C365-03...
  • Page 144 Programming (OUC), 117 SMTPS, 69 SNMP, 13, 53, 125 SNMPv3, 15, 70 SSL/TLS, 69 STARTTLS, 69 Static values, 98 STEP 7 - version, 23 SYSLOG, 80 T_CONFIG, 119 TC_CONFIG, 119 TeleService, 13 Time stamp, 90 CP 1243-1 Operating Instructions, 04/2017, C79000-G8976-C365-03...

Table of Contents