Siemens SIMATIC NET ET 200SP Operating Instructions Manual
  1. Manuals
  2. Brands
  3. Siemens Manuals
  4. Industrial Electrical
  5. SIMATIC ET 200SP
  6. Operating instructions manual

Siemens SIMATIC NET ET 200SP Operating Instructions Manual

Industrial ethernet
Hide thumbs Also See for SIMATIC NET ET 200SP:
Table of Contents

Advertisement

Quick Links

Download this manual
CP 154xSP-1
SIMATIC NET
ET 200SP - Industrial Ethernet
CP 154xSP-1
Operating Instructions
CP 1542SP-1
CP 1542SP-1 IRC
CP 1543SP-1
12/2019
C79000-G8976-C426-05
Preface
Application and functions
LEDs and connectors
Installation, wiring,
commissioning
Configuration
Program blocks
Diagnostics and
maintenance
Technical specifications
Approvals
Dimension drawings
Accessories
Documentation references
1
2
3
4
5
6
7
A
B
C
D

Advertisement

Table of Contents
loading

Related Manuals for Siemens SIMATIC NET ET 200SP

Summary of Contents for Siemens SIMATIC NET ET 200SP

  • Page 1 CP 154xSP-1 Preface Application and functions LEDs and connectors SIMATIC NET Installation, wiring, commissioning ET 200SP - Industrial Ethernet CP 154xSP-1 Configuration Program blocks Operating Instructions Diagnostics and maintenance Technical specifications Approvals Dimension drawings Accessories Documentation references CP 1542SP-1 CP 1542SP-1 IRC CP 1543SP-1 12/2019 C79000-G8976-C426-05...
  • Page 2 Note the following: WARNING Siemens products may only be used for the applications described in the catalog and in the relevant technical documentation. If products and components from other manufacturers are used, these must be recommended or approved by Siemens. Proper transport, storage, installation, assembly, commissioning, operation and maintenance are required to ensure that the products operate safely and without any problems.

  • Page 3: Preface

    Preface Validity of this manual This document contains information on the following modules: ● CP 1542SP-1 Article number 6GK7542-6UX00-0XE0 Hardware product version 1 Firmware version V2.1 Communications processor for connecting a SIMATIC ET 200SP CPU to Industrial Ethernet ● CP 1542SP-1 IRC Article number 6GK7542-6VX00-0XE0 Hardware product version 1 Firmware version V2.1...
  • Page 4 Preface Directly below, you will find the firmware version of the CP as it shipped. The MAC address of the interface is printed on the front at the bottom left, above the connectors for the power supply: ● 00:1B:1B:xx:xx:01 (interface) You can learn the MAC addresses of the ports via the online functions of STEP 7 (assessible devices): ●...
  • Page 5 Preface Replaced edition Edition 02/2018 Structure of the documentation The documentation for the three CP types consists of the following manuals and contents: ● Operating instructions Valid for all three CP types – Application and functions – Requirements (CPUs, configuration software, etc.) –...
  • Page 6 Preface Current manual edition on the Internet You will also find the current version of this manual on the Internet pages of Siemens Industry Online Support: ● CP 1542SP-1 / CP 1543SP-1 Link: (https://support.industry.siemens.com/cs/ww/en/ps/22144/man) ● CP 1542SP-1 IRC Link: (https://support.industry.siemens.com/cs/ww/en/ps/22143/man) Cross references In this manual there are often cross references to other sections.
  • Page 7 The firmware is signed and encrypted. This ensures that only firmware created by Siemens can be downloaded to the device. Device defective If a fault develops, please send the device to your Siemens representative for repair. Repairs on-site are not possible. Recycling and disposal The product is low in pollutants, can be recycled and meets the requirements of the WEEE directive 2012/19/EU "Waste Electrical and Electronic Equipment".
  • Page 8 Preface CP 154xSP-1 Operating Instructions, 12/2019, C79000-G8976-C426-05...

  • Page 9: Table Of Contents

    Table of contents Preface ..............................3 Application and functions ........................13 Components of the product ....................13 Application ..........................13 Communications services ....................... 14 Telecontrol communication (CP 1542SP-1 IRC) ..............16 Communication via SINEMA RC (CP 1542SP-1 IRC, CP 1543SP-1) ........18 Security functions (CP 1542SP-1 IRC, CP 1543SP-1) ............
  • Page 10 Table of contents 4.4.3 Access to the Web server ...................... 57 Time-of-day synchronization ....................57 DNS configuration ........................59 Communication with the CPU ....................59 SNMP ............................. 61 Security (CP 1543SP-1) ......................62 4.9.1 Security user .......................... 62 4.9.2 Firewall ........................... 62 4.9.2.1 Pre-check of messages by the MAC firewall.
  • Page 11 Table of contents BusAdapter ........................... 109 Router SCALANCE M ......................111 Documentation references ........................113 Index..............................117 CP 154xSP-1 Operating Instructions, 12/2019, C79000-G8976-C426-05...
  • Page 12 Table of contents CP 154xSP-1 Operating Instructions, 12/2019, C79000-G8976-C426-05...

  • Page 13: Application And Functions

    Application and functions Components of the product The following components are supplied with the product: ● CP 154xSP-1 ● Plug for the socket of the power supply (24VDC) of the CP ● DVD with documentation and license texts A BusAdapter for the Ethernet connection of the CP does not ship with the product. Application Application of the CP variants The CP is used to connect the ET 200SP to Industrial Ethernet via a copper cable or fiber-...

  • Page 14: Communications Services

    Application and functions 1.3 Communications services ● CP 1542SP-1 IRC The CP 1542SP-1 IRC supports telecontrol communication for connecting the ET 200SP CPU to a control center. One of the following telecontrol protocols can be used as an alternative: – TeleControl Basic For connection of the ET 200SP CPU to a control center with telecontrol server (TCSB) –...
  • Page 15 Application and functions 1.3 Communications services ● Open User Communication (OUC) OUC via program blocks with the following protocols: – TCP/IP – ISO-on-TCP – UDP The CP 1543SP-1 supports Secure OUC. You will find the program blocks supported by the three CP types in the section Program blocks (Page 81).

  • Page 16: Telecontrol Communication (Cp 1542Sp-1 Irc)

    Application and functions 1.4 Telecontrol communication (CP 1542SP-1 IRC) Telecontrol communication (CP 1542SP-1 IRC) Telecontrol protocols In addition to the communications services named above, the CP 1542SP-1 IRC supports the following telecontrol protocols for communication with a master station and other telecontrol stations: ●...
  • Page 17 Communication is based on the DNP3 SPECIFICATION Version 2.11 (2007/2009). You will find a detailed overview of the attributes and properties of the DNP3 protocol that are supported by the CP in the DNP3 device profile; see Link: (https://support.industry.siemens.com/cs/ww/en/ps/22143/man) Communications partners of the CP can be: DNP3 master: –...

  • Page 18: Communication Via Sinema Rc (Cp 1542Sp-1 Irc, Cp 1543Sp-1)

    Application and functions 1.5 Communication via SINEMA RC (CP 1542SP-1 IRC, CP 1543SP-1) Further properties of the CP 1542SP-1 IRC ● Data point configuration The process values are configured as data points for the communication. No program blocks need to be programmed for the CP 1542SP-1 IRC to transfer user data between the station and communications partner.
  • Page 19 Application and functions 1.5 Communication via SINEMA RC (CP 1542SP-1 IRC, CP 1543SP-1) Communication via SINEMA Remote Connect (SINEMA RC) The "SINEMA RC Server" application provides end-to-end connection management of distributed networks via the Internet. This also includes secure remote access to lower-level stations.

  • Page 20: Security Functions (Cp 1542Sp-1 Irc, Cp 1543Sp-1)

    Application and functions 1.6 Security functions (CP 1542SP-1 IRC, CP 1543SP-1) Table 1- 1 Use cases and parameters to be activated Parameter settings (Parameters abbreviated) * Use case TC-SRC * Explanation of the parameter abbreviations: SRC - Security > VPN (activated) > "VPN connection type": "Automatic OpenVPN configuration via SINEMA Remote Connect Server"...
  • Page 21 Application and functions 1.6 Security functions (CP 1542SP-1 IRC, CP 1543SP-1) Secure underlying networks can be operated via additional Ethernet/PROFINET interfaces of the CPU. As a result of using the CP, as a security module, the following security functions are accessible to the ET 200SP station on the interface to the Ethernet network: ●...
  • Page 22 Application and functions 1.6 Security functions (CP 1542SP-1 IRC, CP 1543SP-1) You will find additional information on the functionality and configuration of the security functions in the STEP 7 information system. CP 1542SP-1 IRC The CP supports the following security functions: ●...

  • Page 23: Other Services And Properties

    Application and functions 1.7 Other services and properties ● DNP3 The CP supports authentication according to the "Secure Authentication V5" specification. If the security functions are enabled, the CP can process telecontrol communication via SINEMA Remote Connect. ● IEC 60870-5-104 If the security functions are enabled, the CP can process telecontrol communication via SINEMA Remote Connect.

  • Page 24: Configuration Limits And Performance Data

    Application and functions 1.8 Configuration limits and performance data ● SNMP As SNMP agent, the CP supports queries via SNMPv1. The CP 1543SP-1 also supports SNMPv3. For more detailed information, refer to section SNMP (Page 61). ● E-mail The CP 1542SP-1 IRC and CP 1543SP-1 support sending e-mails. Configuration limits and performance data Number of CPs per station In each ET 200SP station, up to three special modules can be plugged in and configured;...
  • Page 25 Application and functions 1.8 Configuration limits and performance data CP 1543SP-1 Security functions of the CP 1543SP-1 ● VPN tunnel (IPsec) A maximum of four IPsec tunnels can be established for secure communication with other security modules. ● Firewall rules The maximum number of firewall rules in advanced firewall mode is limited to 256.
  • Page 26 Application and functions 1.8 Configuration limits and performance data ● Frame memory (send buffer) The CP has a frame memory (send buffer) for the values of data points configured as an event. The volume of the send buffer is divided equally among all configured communications partners.

  • Page 27: Requirements For Use

    Application and functions 1.9 Requirements for use Requirements for use 1.9.1 Hardware requirements Bus adapter To connect to the Ethernet network, the CP requires a BusAdapter. A BusAdapter does not ship with the CP. The CP supports the following BusAdapter: ●...

  • Page 28: Software Requirements

    Application and functions 1.10 Configuration examples 1.9.2 Software requirements Configuration software To configure the entire functionality of the CP firmware version described in this document, the following configuration tool is required: ● STEP 7 Professional V16 Software for online functions To use the online functions, the following software is required: ●...
  • Page 29 Application and functions 1.10 Configuration examples Figure 1-1 Configuration example of an ET 200SP with CP 1542SP-1 CP 1543SP-1 - Cell protection with security functions The CP communicates encrypted with communications partners in the connected network. The firewall monitors the access to the ET 200SP and therefore protects lower-level networks.
  • Page 30 Application and functions 1.10 Configuration examples CP 1542SP-1 IRC - Connection to control centers By using the CP the ET 200SP can be used as a remote terminal unit. The following protocols can be used for telecontrol communication: ● TeleControl Basic ●...
  • Page 31 Application and functions 1.10 Configuration examples Figure 1-4 Configuration example of an ET 200SP with CP 1542SP-1 IRC; protocol: ST7 CP 154xSP-1 Operating Instructions, 12/2019, C79000-G8976-C426-05...
  • Page 32 Application and functions 1.10 Configuration examples Figure 1-5 Configuration example of an ET 200SP with CP 1542SP-1 IRC; protocol: DNP3 A configuration with which the protocol IEC 60870-5-104 is used could look similar. CP 154xSP-1 Operating Instructions, 12/2019, C79000-G8976-C426-05...
  • Page 33 Application and functions 1.10 Configuration examples Telecontrol via SINEMA Remote Connect The following figure shows a configuration in which the CP 1542SP-1 IRC communicates with the master station via a SINEMA Remote Connect Server. In this example, the CP uses the protocol IEC 60870-5-104.
  • Page 34 Application and functions 1.10 Configuration examples Remote maintenance with SINEMA RC The following figure shows the connection of different stations with Security CP to an engineering station via SINEMA Remote Connect - Server. Figure 1-7 Connection of stations to engineering station via SINEMA RC CP 154xSP-1 Operating Instructions, 12/2019, C79000-G8976-C426-05...

  • Page 35: Leds And Connectors

    LEDs and connectors LEDs Meaning of the LED displays of the CP The CP has the following light emitting diodes (LEDs) on the front: LED name Meaning Power supply Operating mode Error Maintenance Table 2- 1 Legend for the following tables Symbol Meaning / LED flashes...

  • Page 36: Power Supply

    LEDs and connectors 2.2 Power supply Meaning (green) (green) (red) (yellow) Firmware update running There is a maintenance request from the CP. Example: End of the firmware update • LEDs of the bus adapter Every port of a bus adapter has an LED "LKx" that informs about the connection status with Ethernet and the frame traffic of the port.

  • Page 37: Connector For The Busadapter

    LEDs and connectors 2.3 Connector for the BusAdapter Connector X80 is intended for connection to a single or redundant power supply. The power supply is connected to the CP with the supplied plug-in terminal block. The terminal block is plugged in to the socket X80 of the CP. For information on installing and connecting up, refer to the sections Installing the CP (Page 42) and Connecting the CP (Page 46).
  • Page 38 LEDs and connectors 2.3 Connector for the BusAdapter CP 154xSP-1 Operating Instructions, 12/2019, C79000-G8976-C426-05...

  • Page 39: Installation, Wiring, Commissioning

    Installation, wiring, commissioning Important notes on using the device Safety notices on the use of the device Note the following safety notices when setting up and operating the device and during all associated work such as installation, connecting up or replacing the device. Overvoltage protection NOTICE Protection of the external power supply...
  • Page 40 Zone 2, the device must be installed in a cabinet or a suitable enclosure. WARNING DIN rail In the ATEX and IECEx area of application only the Siemens DIN rail 6ES5 710-8MA11 may be used to mount the modules. CP 154xSP-1...

  • Page 41: Notes On Use In Hazardous Areas According To Atex / Iecex

    Installation, wiring, commissioning 3.1 Important notes on using the device 3.1.2 Notes on use in hazardous areas according to ATEX / IECEx WARNING Requirements for the cabinet/enclosure To comply with EC Directive 2014/34 EU (ATEX 114) or the conditions of IECEx, this enclosure or cabinet must meet the requirements of at least IP54 (in compliance with EN 60529) according to EN 60079-7.

  • Page 42: General Notices On Use In Hazardous Areas According To Fm

    Installation, wiring, commissioning 3.2 Installing the CP 3.1.4 General notices on use in hazardous areas according to FM WARNING EXPLOSION HAZARD You may only connect or disconnect cables carrying electricity when the power supply is switched off or when the device is in an area without inflammable gas concentrations. This equipment is suitable for use in Class I, Division 2, Groups A, B, C and D or non- hazardous locations only.
  • Page 43 Installation, wiring, commissioning 3.2 Installing the CP NOTICE Installation location - Dependency of the temperature range The module must be installed so that its upper and lower ventilation slits are not covered, allowing adequate ventilation. Above and below the modules, there must be a clearance of 25 mm to allow air to circulate and prevent overheating.
  • Page 44 Protecting the modules from slipping on the DIN rail If you install the modules in an area with mechanical load, use suitable clamping devices at both ends of the device group to secure the modules on the DIN rail, e.g. Siemens and retainer 8WA1808.
  • Page 45 Installation, wiring, commissioning 3.2 Installing the CP The ET 200SP system is suitable for installation on a mounting rail according to EN 60715 (35 × 7.5 mm or 35 × 15 mm) 1. Hang the CPU / the interface module on the mounting rail. 2.

  • Page 46: Connecting The Cp

    Installation, wiring, commissioning 3.3 Connecting the CP 3. Screw the bus adapter to the CP. The securing screw is located at the top left on the front of the bus adapter. To do this use a screwdriver with 3 to 3.5 mm blade width or a suitable Torx screwdriver (T15).

  • Page 47: Commissioning The Cp

    Installation, wiring, commissioning 3.4 Commissioning the CP Power supply at connector X80 You will find the location of the connector X80 four the power supply to the CP in section Power supply (Page 36). There, you will also find notes on reverse polarity protection. The 2-terminal plug-in terminal block has the following pin assignment for the socket: Terminal Assignment...
  • Page 48 Installation, wiring, commissioning 3.4 Commissioning the CP Note Time-of-day synchronization when using SINEMA RC When the CP obtains the time from the CPU, set the CPU time manually during commissioning when using SINEMA Remote Connect; see note in section Commissioning the CP (Page 47).

  • Page 49: Configuration

    ● Do not connect the device directly to the Internet. Operate the device within a protected network area. ● Check regularly for new features on the Siemens Internet pages. – Here you can find information on Industrial Security: Link: (http://www.siemens.com/industrialsecurity) –...
  • Page 50 Configuration 4.1 Security recommendations Security functions of the product Use the options for security settings in the configuration of the product. These includes among others: ● Protection levels Configure a protection level of the CPU. You will find information on this in the information system of STEP 7. ●...
  • Page 51 Configuration 4.1 Security recommendations Protocols Secure and non-secure protocols ● Only activate protocols that you require to use the system. ● Use secure protocols when access to the device is not prevented by physical protection measures. The NTP protocol provides a secure alternative with NTP (secure). Table: Meaning of the column titles and entries The following table provides you with an overview of the open ports on this device.
  • Page 52 Configuration 4.1 Security recommendations Table 4- 1 Server ports (all three CP types) Protocol / function Port number (pro- Default of the Port status Authentication tocol) port DHCP 68 (UDP) Closed Open after configuration (while the CP obtains a new address) S7 and online con- 102 (TCP) Closed...

  • Page 53: Configuration In Step 7

    Configuration 4.2 Configuration in STEP 7 Ports of communications partners and routers Make sure that you enable the required client ports in the corresponding firewall on the communications partners of the CP and in intermediary routers. These can be: ● TeleControl Basic / 55097 (TCP) - can be set ●...
  • Page 54 Configuration 4.2 Configuration in STEP 7 Overview of configuration of the CP Follow the steps below when configuring: 1. Create a STEP 7 project. 2. Insert the required SIMATIC stations from the following catalog directory: Controller > SIMATIC ET200 CPU > ET 200SP CPU 3.

  • Page 55: Communication Types (Cp 1543Sp-1)

    Configuration 4.3 Communication types (CP 1543SP-1) Communication types (CP 1543SP-1) Validity: CP 1543SP-1 You will find the description of the CP 1542SP-1 IRC in the relevant configuration manual. "Communication types" parameter group To minimize the risk of unauthorized access to the station via Ethernet, you need to enable the following communications services for the CP.

  • Page 56: Advanced Options

    Configuration 4.4 Ethernet interface Communication partner and IPv6 Note Internet communication via IPv6 If you want to use IPv6 addresses and connect the CP to the Internet, make sure that the router connected to the Internet and the providers of the Internet services used (e.g. e-mail) also support IPv6 addresses.

  • Page 57: Access To The Web Server

    Configuration 4.5 Time-of-day synchronization 4.4.3 Access to the Web server Access to the Web server of the CPU The Web server is located in the CPU. Via the CP, you have access to the Web server of the CPU. From a PC you can access the Web server of the station if the PC is connected to the system network via LAN.
  • Page 58 Configuration 4.5 Time-of-day synchronization Time-of-day synchronization of the CPs The CPs support the following methods of time-of-day synchronization: ● CP 1542SP-1 – NTP – From local station Configurable at the Ethernet interface ● CP 1543SP-1 – NTP – NTP (secure) –...

  • Page 59: Dns Configuration

    Configuration 4.6 DNS configuration Note Ensuring a valid time of day If you use security functions, a valid time of day is required. It is recommended to use the NTP (secure) method. Note Manually setting the time of day during commissioning If you use security functions or SINEMA RC, set the time manually during commissioning;...
  • Page 60 Configuration 4.7 Communication with the CPU CP time ● CP time to CPU The function allows the CPU to read the time of day of the CP. Using this approach, the CP can synchronize the CPU time. Procedure: – The CPU sets the input "Time trigger variable" (BOOL) to 1 with the user program. –...

  • Page 61: Snmp

    Configuration 4.8 SNMP Variables only for CP 1543SP-1: ● VPN IPsec status The PLC tag (BOOL) indicates whether a VPN IPsec tunnel is established: – 0 = No tunnel established – 1 = Tunnel established ● Connection to SINEMA Remote Connect The PLC tag (BOOL) indicates whether an OpenVPN tunnel to SINEMA RC is established: –...

  • Page 62: Security (Cp 1543Sp-1)

    Configuration 4.9 Security (CP 1543SP-1) Security (CP 1543SP-1) Security functions of the CP 1542SP-1 IRC You can find a description of the security functions of the CP 1542SP-1 IRC in the configuration manual of the respective telecontrol protocol, see Documentation references (Page 113).

  • Page 63: Settings For Online Security Diagnostics And Downloading To Station With The Firewall Activated

    Configuration 4.9 Security (CP 1543SP-1) 4.9.2.2 Settings for online security diagnostics and downloading to station with the firewall activated Setting the firewall for online functions With the security functions enabled, follow the steps outlined below. Global security functions: 1. Select the entry "Firewall > Services > Define services for IP rules". 2.

  • Page 64: Firewall Settings For S7 Connections Via A Vpn Tunnel

    Configuration 4.9 Security (CP 1543SP-1) 4.9.2.4 Firewall settings for S7 connections via a VPN tunnel IP rules in advanced firewall mode If you set up configured connections (S7, OUC) with a VPN tunnel between the CP and a communications partner, you will need to adapt the local firewall settings of the CP: In advanced firewall mode ("Security >...

  • Page 65: Vpn

    Configuration 4.9 Security (CP 1543SP-1) E-mail configuration ● No configuration As default, the sending of e-mails is disabled. ● Activate SMTP Enable this option if you want to use the sending of unencrypted e-mails via SMTP port ● Enable SSL/TLS If your e-mail service provider only supports encrypted transfer, enable this option.
  • Page 66 Configuration 4.9 Security (CP 1543SP-1) Properties ● VPN forms a logical subnet that is embedded in a neighboring (assigned) network. VPN uses the usual addressing mechanisms of the assigned network, however in terms of the data, it transports its own frames and therefore operates independent of the rest of this network.

  • Page 67: Sinema Remote Connect

    Configuration 4.9 Security (CP 1543SP-1) 4.9.5.2 SINEMA Remote Connect Remote maintenance with SINEMA Remote Connect (SINEMA RC) The application "SINEMA Remote Connect" (SINEMA RC) is available for remote maintenance purposes. SINEMA RC uses OpenVPN for encryption of the data. The center of the communication is SINEMA RC Server via which communication runs between the subscribers and that manages the configuration of the communications system.
  • Page 68 Configuration 4.9 Security (CP 1543SP-1) VPN > General 1. Activate VPN 2. As "VPN connection type", select the option "Automatic OpenVPN configuration via SINEMA Remote Connect Server" if you wish to use communication via SINEMA Remote Connect. If you select "Internet Key Exchange (IKE) ...", you can use communication via IPsec tunnels.
  • Page 69 Configuration 4.9 Security (CP 1543SP-1) Optional settings The connection establishment is configured in the "Security > VPN > Optional settings" parameter group with the parameter "Connection type". ● Update interval With this parameter you set the interval at which the CP queries the configuration on the SINEMA RC Server.

  • Page 70: Creating A Vpn Tunnel For S7 Communication Between Stations

    Configuration 4.9 Security (CP 1543SP-1) 4.9.5.3 Creating a VPN tunnel for S7 communication between stations Requirements To allow a VPN tunnel to be created for S7 communication between two S7 stations or between an S7 station and an engineering station with a security CP (for example CP 1628), the following requirements must be met: ●...

  • Page 71: Vpn Communication With Softnet Security Client (Engineering Station)

    Configuration 4.9 Security (CP 1543SP-1) 3. Double-click on the "VPN groups" > "Assign module to a VPN group" entry. 4. Assign the security modules between which VPN tunnels will be established to the VPN group. Note Current date and current time on the CP for VPN connections To establish a VPN connection and for the associated recognition of the certificates to be exchanged, the current date and the current time are required on both stations.

  • Page 72: Establishment Of Vpn Tunnel Communication Between The Cp And Scalance M

    Configuration 4.9 Security (CP 1543SP-1) Use the procedure for disabling the node as explained below only if the described problem occurs. Disable the node in the SOFTNET Security Client tunnel overview: 1. Remove the checkmark in the "Enable active learning" check box. The lower-level node initially disappears from the tunnel list.

  • Page 73: Snmp

    Configuration 4.9 Security (CP 1543SP-1) 4.9.6 SNMP SNMP You will find the range of functions of the device for SNMP in the section Diagnostics with SNMP (Page 90). If the security functions are enabled, you have the following selection and setting options. SNMP ●...

  • Page 74: Certificate Manager

    Configuration 4.9 Security (CP 1543SP-1) SNMPv3 The algorithms need to be configured for encrypted access to the device via SNMPv3. ● "Authentication algorithm" Select the authentication method to be used from the drop-down list. ● "Encryption algorithm" Select the encryption method to be used from the drop-down list. User management In the user management that you will find in the global security settings, assign the various users their role.

  • Page 75: Messages: E-Mails (Cp 1543Sp-1)

    Configuration 4.10 Messages: E-mails (CP 1543SP-1) Certificates for the CP 1543SP-1 Before certificates can be referenced in the program blocks for Secure Communication, these certificates must be assigned to the Security module as device certificates via the local certificate manager. Requirement in the global security settings To be able to assign the CP certificate of a communications partner, you need to first import the certificates of the partner in the global certificate manager (Global security settings).
  • Page 76 Configuration 4.10 Messages: E-mails (CP 1543SP-1) Open the message editor You configure the individual messages (e-mails) in the message editor in STEP 7. Alternatively, you can open the editor: ● By selecting the CP Shortcut menu "Open the data point and messages editor" ●...
  • Page 77 Configuration 4.10 Messages: E-mails (CP 1543SP-1) Trigger: Triggering e-mail transfer In the "Trigger" tab, you configure when sending of an e-mail is triggered and whether additional information is sent with it. ● E-mail trigger Specifies the event on which the sending of the e-mail is triggered: –...
  • Page 78 Configuration 4.10 Messages: E-mails (CP 1543SP-1) ● Enable identifier for processing status If the option is enabled, every attempt to send returns a status with information about the processing status of the sent message. The status is written to the "PLC tag for processing status" (DWORD). If there are problems delivering messages, you can determine the status via the Web server of the CPU by displaying the value of the PLC tag there.
  • Page 79 Configuration 4.10 Messages: E-mails (CP 1543SP-1) ● Adapting the column width You can reach this function with the following actions: – Using the shortcut menu that opens when you right-click on a column header: "Optimize width", "Optimize width of all columns" –...
  • Page 80 Configuration 4.10 Messages: E-mails (CP 1543SP-1) CP 154xSP-1 Operating Instructions, 12/2019, C79000-G8976-C426-05...

  • Page 81: Program Blocks

    Program blocks Program blocks for OUC Program blocks for Open User Communication (OUC) Connections of Open User Communication are not configured. For TCP / UDP / ISO-on-TCP communication via Ethernet, the blocks of Open User Communication (OUC) listed below are used. For this, create a suitable program blocks. You will find details on the program blocks in the information system of STEP 7.
  • Page 82 Program blocks 5.1 Program blocks for OUC For changing configuration data of the CP during runtime: ● T_CONFIG V1.0 Program-controlled configuration of the IP parameters See section Changing the IP parameters during runtime (Page 84) for more on this. The program block can be found in STEP 7 in the "Instructions > Communication > Open User Communication"...
  • Page 83 Program blocks 5.1 Program blocks for OUC SDTs Depending on the CP-specific security functions, the three CP types support the following SDTs: ● SDTs for all three CP types – TCON_IP_V4 For transferring data via TCP or UDP – TCON_QDN For TCP or UDP communication via the fully qualified domain name (FQDN) (IPv4 / IPv6) –...

  • Page 84: Changing The Ip Parameters During Runtime

    Program blocks 5.2 Changing the IP parameters during runtime Connection establishment and termination Connections are established using the program block TCON. Note that a separate program block TCON must be called for each connection. A separate connection must be established for each communications partner even if identical blocks of data are being sent.

  • Page 85: Modbus Blocks

    Program blocks 5.3 MODBUS blocks Program blocks Program-controlled changing of the IP parameters is supported by program blocks. The program blocks access address data stored in a suitable system data type (SDT). Apart from the address parameters of the CP, with T_CONFIG the address parameters of DNS servers (IF_CONF_DNS) and NTP servers (IF_CONF_NTP) can also be changed program controlled.
  • Page 86 Program blocks 5.3 MODBUS blocks CP 154xSP-1 Operating Instructions, 12/2019, C79000-G8976-C426-05...

  • Page 87: Diagnostics And Maintenance

    Diagnostics and maintenance Diagnostics options The following diagnostics options are available. LEDs of the module For information on the LED displays, refer to the section LEDs (Page 35). STEP 7: The "Diagnostics" tab in the Inspector window Here, you can obtain the following information about the online status of the selected module.
  • Page 88 Diagnostics and maintenance 6.1 Diagnostics options ● Industrial Remote Communication For the CP 1542SP-1 IRC, you receive telecontrol-specific information here. The group has the following diagnostics pages: – Partner Information about the address settings of the partner, connection statistics, configuration data of the partner and other diagnostics information. –...
  • Page 89 The log file is created with the "Save service data" button. The data is saved in a file with the format "*.dmp" that can be evaluated by Siemens Customer Support. Web server of the CPU Via the CP you can access the Web server of the CPU and the information available there.

  • Page 90: Online Security Diagnostics Via Port 8448 (Cp 1542Sp-1 Irc, Cp 1543Sp-1)

    SNMP uses the connectionless UDP protocol. The information on the properties of SNMP-compliant devices is stored in MIB files (MIB = Management Information Base). You will find detailed information on SNMP and the Siemens Automation MIB in the manual /6/ (Page 114). CP 154xSP-1...
  • Page 91 Diagnostics and maintenance 6.3 Diagnostics with SNMP Scope of performance of the CPs The CPs support the following SNMP version: ● CP 1542SP-1 – SNMPv1 ● CP 1543SP-1, CP 1542SP-1 IRC – SNMPv1 – SNMPv3 (with activated Security functions) For information on configuring SNMPv3, see section SNMP (Page 73). Traps are not supported by the CP.
  • Page 92 Diagnostics and maintenance 6.3 Diagnostics with SNMP Supported MIB objects in SNMPv3 If SNMPv3 is enabled, the CP returns the contents of the following MIB objects: ● MIB II (acc. to RFC1213) The CP supports the following groups of MIB objects: –...

  • Page 93: Web Server Of The Cpu

    Diagnostics and maintenance 6.4 Web server of the CPU Web server of the CPU The Web server of the CPU The CPU has a Web server which you can access from a PC using HTTP/HTTPS via the The Web server of the CPU provides a wide variety of functions for diagnostics and service purposes.
  • Page 94 Diagnostics and maintenance 6.4 Web server of the CPU Depending on the protocol used you need to make the following further settings in the parameter group of the firewall "From external to station". ● With connection establishment using HTTP – Enable the "Allow HTTP" option. –...

  • Page 95: Processing Status Of E-Mails (Cp 1543Sp-1)

    Diagnostics and maintenance 6.5 Processing status of e-mails (CP 1543SP-1) Processing status of e-mails (CP 1543SP-1) Processing status of e-mails The following status identifiers apply to e-mails configured with the message editor of the CP, see also section Messages: E-mails (CP 1543SP-1) (Page 75). E-mails sent via program blocks of Open User Communication return a different status via the block (see block help).
  • Page 96 Diagnostics and maintenance 6.5 Processing status of e-mails (CP 1543SP-1) Status Meaning 84xx Other error message from the e-mail server Apart from the leading "8", the message corresponds to the three-digit error number of the SMTP protocol. 8500 Syntax error: Command unknown. This also includes the error of having a command chain that is too long.

  • Page 97: Downloading Firmware

    Downloading firmware New firmware versions of the CP If a new firmware version is available for the CP, you will find this on the Internet pages of Siemens Industry Online Support: Link: (https://support.industry.siemens.com/cs/ww/en/ps/22144/dl) Link: (https://support.industry.siemens.com/cs/ww/en/ps/22143/dl) There are three different ways of loading a new firmware file on the CP: ●...

  • Page 98: Module Replacement

    Diagnostics and maintenance 6.7 Module replacement 5. Click on "Start search" to search for the module in the network and to specify the connection path. When the module is found it is displayed in the table. 6. Connect using the "Connect" button. The "Connect online"...

  • Page 99: Technical Specifications

    Technical specifications Technical specifications Article numbers CP 1542SP-1 6GK7542-6UX00-0XE0 CP 1542SP-1 IRC 6GK7542-6VX00-0XE0 CP 1543SP-1 6GK7543-6WX00-0XE0 Attachment to Industrial Ethernet Quantity Design Slot for bus adapter Properties For information on the properties of the BusAdapters and the permissible cable lengths, see /3/ (Page 114). Electrical data External power supply (X80), design Socket...
  • Page 100 Technical specifications Technical specifications Permitted ambient conditions Ambient temperature During operation with the rack in- -30 .. + 60 °C stalled horizontally During operation with the rack in- -30 .. + 50 °C stalled vertically During storage -40 .. +70 °C During transportation -40 ..

  • Page 101: Approvals

    EC L174, 01/07/2011, page 88-110 The EC Declaration of Conformity is available for all responsible authorities at: Siemens Aktiengesellschaft Division Process Industries and Drives Process Automation...
  • Page 102 Approvals DE-76181 Karlsruhe Germany You will find the EC Declaration of Conformity on the Internet at the following address: Link: (https://support.industry.siemens.com/cs/ww/en/ps/) > Certificate type: "EC declaration of conformity" IECEx The product meets the requirements of explosion protection according to IECEx.
  • Page 103 ● In the SIMATIC NET Manual Collection under "All documents" >"Use of subassemblies/modules in a Zone 2 Hazardous Area" ● On the Internet at the following address: Link: (https://support.industry.siemens.com/cs/ww/en/view/78381013) The CP meets the requirements of the EU Directive 2014/30/EU "Electromagnetic Compatibility" (EMC directive).
  • Page 104 Approvals cULus Hazardous (Classified) Locations Underwriters Laboratories, Inc.: CULUS Listed E223122 IND. CONT. EQ. FOR HAZ. LOC. Applied standards: ● ANSI ISA 12.12.01 ● CSA C22.2 No. 213-M1987 APPROVED for Use in: ● Cl. 1, Div. 2, GP. A, B, C, D T4 ●...
  • Page 105 SIMATIC NET products are regularly submitted to the relevant authorities and approval centers for approvals relating to specific markets and applications. If you require a list of the current approvals for individual devices, consult your Siemens contact or check the Internet pages of Siemens Industry Online Support: Link: (http://support.automation.siemens.com/WW/view/en/45605894)
  • Page 106 Approvals CP 154xSP-1 Operating Instructions, 12/2019, C79000-G8976-C426-05...

  • Page 107: Dimension Drawings

    Dimension drawings All dimensions in the dimension drawings are in millimeters. Figure B-1 Front view of the CP CP 154xSP-1 Operating Instructions, 12/2019, C79000-G8976-C426-05...
  • Page 108 Dimension drawings Figure B-2 Side view (left) of the CP CP 154xSP-1 Operating Instructions, 12/2019, C79000-G8976-C426-05...

  • Page 109: Accessories

    Accessories BusAdapter Compatible BusAdapter To connect to the Ethernet network, the CP requires a BusAdapter. A BusAdapter does not ship with the CP. Figure C-1 Example of a bus adapter, here BA SCRJ/RJ45 The CP supports the following bus adapters: ●...
  • Page 110 – 1 x fiber-optic cable POF/PCF – 1 x direct connection of the bus cable (FastConnect) Article number: 6ES7193-6AP40-0AA0 You will find further details in the manual /2/ (Page 114) and in the Siemens Industry Mall under: Link: (https://mall.industry.siemens.com) Pinout of the Ethernet interface The table below shows the pin assignment of the Ethernet interface.

  • Page 111: Router Scalance M

    Accessories C.2 Router SCALANCE M Router SCALANCE M Routers for IP-based communication To connect a communications module to IP-based infrastructure networks, the following routers are available: ● SCALANCE M812 ADSL router for wired IP communication via the Internet, VPN, firewall, NAT, 1 RJ-45 Ethernet interface,1 digital input, 1 digital output, ADSL2T or ADSL2+ –...
  • Page 112 1 digital input, 1 digital output – Version for Europe Article number: 6GK5876-4AA00-2BA2 – Version for North America Article number: 6GK5876-4AA00-2DA2 Information on the devices can be found on the Internet pages of Siemens Industry Online Support: Link: (https://support.industry.siemens.com/cs/ww/en/ps/15982) CP 154xSP-1 Operating Instructions, 12/2019, C79000-G8976-C426-05...

  • Page 113: Documentation References

    Note the structure of the documentation for the devices, see Preface (Page 3). Where to find Siemens documentation ● Article numbers You will find the article numbers for the Siemens products of relevance here in the following catalogs: – SIMATIC NET - Industrial Communication / Industrial Identification, catalog IK PI –...
  • Page 114 Documentation references SIMATIC ET 200SP - Distributed I/O System system manual Siemens AG Link: (http://support.automation.siemens.com/WW/view/en/58649293) SIMATIC ET 200SP Manual Collection Siemens AG Link: (https://support.industry.siemens.com/cs/ww/en/view/84133942) SIMATIC NET TeleControl Server Basic (Version V3) Operating Instructions Siemens AG Link: (https://support.industry.siemens.com/cs/ww/en/ps/15918/man) SIMATIC NET TIM DNP3...
  • Page 115 Documentation references SIMATIC NET Industrial Ethernet / PROFINET System manual Siemens AG ● Industrial Ethernet Link: (https://support.industry.siemens.com/cs/ww/de/view/27069465) ● Passive network components Link: (https://support.industry.siemens.com/cs/ww/en/view/84922825) SIMATIC NET SINEMA Remote Connect - Server Operating Instructions Siemens AG Link: (https://support.industry.siemens.com/cs/ww/en/ps/21816/man) SIMATIC NET SINAUT ST7...
  • Page 116 Documentation references /10/ CP 154xSP-1 Operating Instructions, 12/2019, C79000-G8976-C426-05...

  • Page 117: Index

    Index Abbreviations, 4 Gateway (VPN), 72 Article number, 3 Glossary, 7 Assign - IP address, 89 Hardware product version, 3 BusAdapter, 37 BusAdapter - Configuration, 54 IEC 60870-5-104 Device profile, 17 Connection resources, 24 Protocol, 17 CPU firmware, 28 Inter-station communication, 16 Cross references (PDF), 6 IP address - program-controlled change, 84 IP_CONF_V4, 84...
  • Page 118 Index Power supply, 36 Product name, 4 Recycling, 7 Replacing a module, 98 S7 connections Enable, 55 Safety notices, 39 Security diagnostics, 90 Security functions, 22 Send buffer, 26 Service & Support, 7 SIMATIC NET glossary, 7 SINEMA Remote Connect, 14 Slot rules, 43 SMTPS, 65 SNMP, 24, 90...

This manual is also suitable for:

Cp 1542sp-1Cp 1542sp-1 ircCp 1543sp-1

Table of Contents