Festo CPX-IOT Operating Instructions

CPX-IOT
Gateway
Instructions | Operating
8108871
2019-04a
[8108873]
Translation of the original instructions
EtherNet/IP ® , OPC UA ® , PI PROFIBUS PROFINET
trademarks of the respective trademark owners in certain countries.
1

Intended use

The module described in this document is intended for use in the industrial sector
as a gateway between industrial Ethernet networks and cloud applications, such
as, for example, Festo Dashboard applications.
The module is intended for installation in machines or automation-technology
systems and may only be used only as follows:
– In perfect technical condition
– In its original condition, without unauthorised modifications, except for the
adaptations described in this document
– Within the limits of the product defined by the technical data.
Outside of industrial environments, e.g. in commercial and mixed-residential
areas, it may be necessary to take measures to suppress interference.
Information on commissioning and operating the gateway, e. g. to activate the
network connections "Cloud" and "Device" and to integrate them into the cloud
("Onboarding"):
è 6.3 Rotary switch operating mode
è Festo App World, www.festo.com/appworld
è Festo Dashboards, dashboards.festo.com
Information on the terminal CPX:
è System description of the terminal CPX (CPX-SYS), www.festo.com/pk
All available documents for the product è www.festo.com/pk.
Note on licencing
This product uses open-source software, which is subject to "GNU General Public
License", Version 2 and "GNU Lesser General Public License",
Version 2.1, among others.
The licence conditions of the GPL, LGPL and the other open-source licences can be
viewed via the integrated web server of the product:
• Connect the gateway via the network connection "Device" with a PC or Note-
book.
• Calling up the web server:
è http://<IP-Adresse_des_Netzwerkanschlusses_"Device"/cgi-bin/system-
about.
2

Safety

– Before assembly or installation work:
Switch off the power supply and secure it against being switched on again.
– For the electrical power supply, use PELV circuits in accordance with
IEC 60204-1/EN 60204-1.
– Observe the handling specifications for electrostatically sensitive devices.
– Seal unused connections with cover caps to achieve the required degree of
protection.
– Use connection hardware with the required degree of protection.
– Observe specifications in the system description of the terminal CPX
(CPX-SYS).
– Commission only a completely mounted and wired module.
Festo AG & Co. KG
Ruiter Straße 82
73734 Esslingen
Germany
+49 711 347-0
www.festo.com
8108871
® , SPEEDCON ® are registered
3

Connection and display components

Fig. 1 Connection and display components
3.1

Network connections

For connection to the Internet and the local industrial Ethernet network or direct
connection to the field devices, there are two industrial Ethernet interfaces on the
module, the network connections "Cloud" and "Device". Both connections have
Auto-Negotiation und Crossover detection (factory setting).
Connection Pin Cloud
1)
Signal
1 TD+
2 RD+
3 TD–
4 RD–
Housing, FE,
shielding con- Shield
nected 4)
1) socket, M12, D-coded, 4-pin, SPEEDCON-compatible
2) Pin activation with deactivated crossover detection
3) TD = Transmit Data, RD = Receive Data, FE = Functional Earth
4) via RC link to functional earth
5) equipotential bonding è System description of the terminal CPX (CPX-SYS)
Tab. 1 Network connections
3.1.1

Fieldbus protocol and field devices

Via the network connection "Device", field devices can be directly connected with
an industrial Ethernet connection to the Gateway, e. g. bus node or controllers
(controller, PLC) with protocols such as, for example, PROFINET, EtherNet/IP or
OPC UA.
Information on the supported field devices and controllers è Festo AppWorld,
www.festo.com/appworld.
3.1.2

Network security

NOTICE!
Unauthorised access to the device can cause damage or malfunctions.
When connecting the device to a network, protect the network from unauthorised
access.
Measures to protect the network include:
• Firewall
• Intrusion Prevention System (IPS)
• Network segmentation
• Virtual LAN (VLAN)
• Virtual Private Network (VPN)
• Security at physical access level (Port Security)
An access password only protects against unintentional modification.
For additional information è Guidelines and standards for security in information
technology, e. g. IEC 62443, ISO/IEC 27001.
When connecting the gateway, configure the firewall setting for the network con-
nection "Cloud" as follows:
– Outgoing connections: release for port 443 (HTTPS)
– Incoming connections: no port release
For further information on the required measures in terms of network security,
enter è www.festo.com/sp: "CPX-IOT", filter according to Application Note .
1 LED displays
2 Network connection "Cloud"
3 Network connection "Device"
4 Rotary switch operating mode
5 DIL switch
6 Interface to the terminal CPX
without a network connection
è 8 Connection technology
Device 2)
2)
Explanation Signal Explanation
3)
Transmitted data + RD+ Received data +
Received data + TD+ Transmitted data +
Transmitted data – RD– Received data –
Received data – TD– Transmitted data –
Functional earth 5) FE, Functional earth
Shield
5)