Insevis S7 User manual

Indes of contents
General instructions .............................................................................................................................................................. 4
About INSEVIS ...................................................................................................................................................................... 5
Product family S7-IIoT Gate ays .......................................................................................................................................... 6
Technical data .................................................................................................................................................................. 8
Commissioning .............................................................................................................................................................. 10
Restore IP-address ........................................................................................................................................................ 10
Restore pass ord .......................................................................................................................................................... 11
Update firm are ............................................................................................................................................................ 11
Example project ............................................................................................................................................................. 12
Dashboard-Visualisation .......................................................................................................................................... 13
OPC UA-Server ....................................................................................................................................................... 14
WebConfigurator ................................................................................................................................................................. 18
System settings ............................................................................................................................................................. 18
Date and time ........................................................................................................................................................... 18
Net ork .................................................................................................................................................................... 19
Device ...................................................................................................................................................................... 20
Backup & Update ..................................................................................................................................................... 21
Connections ................................................................................................................................................................... 23
S7-Connections ....................................................................................................................................................... 23
Modbus-TCP ............................................................................................................................................................ 24
Data points .................................................................................................................................................................... 25
S7-Data points ......................................................................................................................................................... 25
Import of S7-Variables ............................................................................................................................................. 26
Modbus-TCP ............................................................................................................................................................ 27
OPC UA ......................................................................................................................................................................... 28
Application ............................................................................................................................................................... 28
Security .................................................................................................................................................................... 29
Server status ............................................................................................................................................................ 30
S7 Datapoints in the OPC UA Server ...................................................................................................................... 31
Modbus-TCP im OPC UA Server ............................................................................................................................. 32
MQTT ............................................................................................................................................................................ 33
Broker-Settings ........................................................................................................................................................ 33
Datapoints-Settings .................................................................................................................................................. 34
Node-RED ..................................................................................................................................................................... 35
Config ....................................................................................................................................................................... 35
Routes ...................................................................................................................................................................... 35
openVPN ....................................................................................................................................................................... 36
Site-To-Site-Topology ............................................................................................................................................... 36
Remote maintenance 1-Topology ............................................................................................................................ 39
Remote maintenance 2-Topology ............................................................................................................................ 39
Users ............................................................................................................................................................................. 40

Changes to older versions of the manual
Rev. 01 / 2019:
ne : Initial version
Rev. 01 / 2020:
ne : Chapter MQTT and openVPN added
changed: All descriptions improved, order of chapters changed
Rev. 02 / 2020:
changed: Description Update and OPCUA, screenshoots updated to V 3.3.1
small corrections in all texts
Import of S7-Variablen moved from „Connections“ to „Datenpoints“
Rev. 03 / 2020:
ne : Additions in OPCUA und NodeRed
Rev. 04 / 2020:
changed: typos, example OPCUA arnings removed
ne : Hint WAN at 192.168.80.60, MQTT unsecure
Hint for etter understanding y application videos
In the English YouTube-channel INSEV IS En e supply different playlists ith handling videos for single details referring to functions,
described in this manual. This ill help you to get familiar ith INSVEIS much faster – PLEASE use it beside this manual!
INSEVIS Gesellschaft für industrielle Systemelektronik und Visualisierung mbH • Am Weichselgarten 7 • D-91058 Erlangen 3
Manual Gate ay, Rev. 04 / 2020

General instructions
Safety instructions
This manual contains instructions to avoid material damage and must be carefully attended for your o n safety. These
instructions are identified ith a arning triangle ith a note of exclamation inside and a signal ord (Signal word) belo .
Danger Death, heavy bodily harm or material damage ill appear, if appropriated precautions are not taken over.
Warning Death, heavy bodily harm or material damage ill appear, if appropriated precautions are not taken over.
Caution Bodily harm or material damage ill appear, if appropriated precautions are not taken over.
Attention means, that a not ished results or states can occur, if the appropriated instruction is not noticed.
Important means the commitment to a special behaviour or operation for the safe treatment of the controller / machine.
Qualified personnel
All devices described in this manual may only be used, built up and operated together ith this documentation. Installation,
initiation and operation of these devices might only be done by instructed personnel ith certified skills, ho can prove their
ability to install and initiate electrical and mechanical devices, systems and current circuits in a generally accepted and admitted
standard.
Operation according to regulations
This device might be only used for this operation ritten in this manual and only in combination ith other
certified external devices. For a correct operation a proper transportation, storage, initiation and maintenance is
necessary.
All valid safety instructions and regulations for the prevent of industrial accidents are to be attended carefully.
The po er supply must be connected to a central ground potential in a star likely iring.
Maintenance
Modifications / repairs of an INSEVIS device might be done only by special educated and trained personnel of
INSEVIS in an ESD safe area. Every unauthorized opening might cause damages and ill terminate all
arranty claims.
Data security
Each customer is responsible by himself for protecting his IT-environment against illegal external attacks. INSEVIS shall not be
held liable for any direct, indirect or consequential damages respect to any claims arising from the possible illegal external
access to their PLCs or HMIs by Ethernet. If you are not sure, ho to protect your environment ask for help at professional legal
IT-companies.
Copyright
This and all other documentation and soft are, supplied or hosted on INSEVIS eb sites to do nload are copyrighted. Any
duplicating of these data in any ay ithout express approval by INSEVIS GmbH is not permitted.
All property and copy rights of theses documentation and soft are and every copy of it are reserved to INSEVIS GmbH.
Trade Marks
INSEVIS refers that all trade marks of particular companies used in o n documentation as e.g.
- STEP®, SIMATIC® and other as reserved trade mark of Siemens AG.
- CANopen® and other as reserved trade mark of CAN in Automation eG
- WINDOWS® and other as reserved trade mark of MICROSOFT AG
and more reserved trade marks are property of the particular o ners and are subjected to common protection of trade marks.
Disclaimer
All technical details in this documentation ere created by INSEVIS ith highest diligence. Anyho mistakes could not be
excluded, so no responsibility is taken by INSEVIS for the complete correctness of this information. This documentation ill
revie ed regulary and necessary corrections ill be done in next version.
With publication of this manual all other versions are no longer valid.
Essential knowledge and experiences
To understand this documentation basic kno ledge and experiences of the automation technology in general and the
programming ith STEP®7 are essential.
4 INSEVIS Gesellschaft für industrielle Systemelektronik und Visualisierung mbH • Am Weichselgarten 7 • D-91058 Erlangen
Manual Gate ay, Rev. 04 / 2020

A out INSEVIS
S7-system components for industrial automation technology
The range of INSEVIS- product families enables an integrated solution and easy to handle for small and medium automation application ith
latest technology, very high quality level and ith additional interfaces like CANopen® and Modbus, to be configured easily.
The easy integration of INSEVIS-products into the S7- orld mean hile is famous and exemplary. Complex communication settings ill be
assigned easily and intuitively, so that these properties expand the common S7- orld by far. A large and multilingual visualization in a modern
design is done by a fe clicks and the ork flo is kno n by every WinCCflex user. It can be simulated on the visualization PC and is
accessible remote.
The S7-CPUs -V and -P are the base of the successfully INSEVIS product families ith Profibus DP Master/Slave.
With the ne S7-CPU-T Panel-PLCs and Compact-PLCs are available ith Profinet IO Controller.
Step®7-Programma ility
INSEVIS-S7-CPUs are programmable by STEP 7® - AWL, KOP, FUP, S7-SCL, S7-Graph from Siemens and in general command-compatible to
Siemens-CPU S7-315-2PNDP. Some special INSEVIS blocks expand the functionality and allo outstanding solutions. The S7-programming
ill be done by good kno n tools SIMATIC®-Manager or by TIA-Portal® from Siemens al ays.
Independence
INSEVIS-PLCs and HMIs does not base on Windo s or Linux, they have an o n firm are. Thereby the hard- and soft are can be exactly
designed for a perfect co-ordination ith this firm are and a lo po er consumption. Booting times of less than 4 seconds and completely no
soft are licenses and a current drain of <100mA @ 24V are the result of these facts.
Get your software rid of licenses
INSEVIS stands for a clear and honest license policy, hat gives the customer sustainable cost benefits. Because of the o nership of BIOS,
firm are and PC-soft are for visualization, configuration and remote access INSEVIS can offer its products completely ithout licenses.
Made in Germany
Development, PCB-design and -production, test and mounting of all INSEVIS-products - all this is made in Germany. So every product is a
proof for the combination of German engineering and economy and is available ith a certification of German origin.
INSEVIS operates a yearly certified
quality management system ref. to DIN
EN ISO 9001.
All suppliers of INSEVIS obligate to this
quality management and contribute to
the high quality level of INSEVIS-
products.
Already during planning these families
one goal as indicated as most
important: to design highest quality and
ergonomics into all products.
These products ere put into
comprehensive validation tests before
they ere produced in selected and
certified production lines.
INSEVIS - Made in Germany
INSEVIS Gesellschaft für industrielle Systemelektronik und Visualisierung mbH • Am Weichselgarten 7 • D-91058 Erlangen 5
Manual Gate ay, Rev. 04 / 2020

Product family S7-IIoT Gateways
INSEVIS-S7-IIoT-Gateway – compati le ut independent up to the cloud
INSEVIS is kno n for independent and sustainable solutions in the S7- orld. With the IIoT-gate ays these experience
should be broadened to the „Industrial Internet of Things“ or „Industry 4.0“. The large kno -ho for S7-technology,
combined ith most modern security-, communication- and operation philosophy allo optimal combination of S7-
solutions ith the big-data- orld on one side and, secure connections bet een S7-islands completely ithout a portal
or a cloud.
Referring to the „Reference architecture model Industry 4.0 – RAMI4.0“ INSEVIS supplies all configuration shells
onboard, so that a single bro ser is enough to assign and configure all the settings. But not for anyone, because a
sophisticated user management cares for a considerably protection and allo s released connections only. External
access is possible by openVPN in a safe ay. An internal project and version management guarantees a better
overvie .
With huge projections by the implemented „NodeRed“ you can let you imagination run; create t eeds, emails or
convert text to speech and get it read to you by an artificial voice. The integrated project- and version management
cares for a better overvie or backups of previous versions.
Fields of application
Add S7-controllers y OPC UA-interface to I4.0
Secure integrating of the S7- Welt by OPC UA to MES, HMI, SCADA
ref. to RAMI4.0 (administration shell)
Secure connection of PLC-islands without Cloud/Portal
By Site-To-Site-open-VPN directly and secure client/server connection of t o S7-
islands ithout need of a clouds or portal
Data acquisition, -processing and -forwarding y IIoT
Data acquisition in S7- and field-layer and transfer by OPC UA or MQTT into
cloud or by FTP, email, T itter, etc.
Secure remote maintenance of multiple systems
Secure remote maintenance of multiple S7-islands by openVPN from a central
station
6 INSEVIS Gesellschaft für industrielle Systemelektronik und Visualisierung mbH • Am Weichselgarten 7 • D-91058 Erlangen
Manual Gate ay, Rev. 04 / 2020

Product family S7-IIoT Gateways
Communication in LAN and WAN
The S7-IIoT-Gate ay communicates to control- and field-level by Ethernet RFC1006 (S7-communication, active Put/Get) and Modbus-TCP.
Other interfaces like CAN/ CANopen, RS485 and RS232 may be configured by Node-RED.
At the WAN-side a fire all protects the device against unauthorized communication attempts. The IIoT-Gate ay offers OPC UA-server
functionality for data exchange ith SCADA-, MES- or other management systems. The MQTT-client functionality allo s the process data
supply for cloud systems.
Most important properties at a glance
S7-varia les import and register mapping We -Configuration
Import S7-variables from Simatic-Manager or TIA-Portal
including symbols and supply it as data point.
Map Modbus registers to OPC UA-data points.
One onboard-configuration tool saves all external PC-tools
Secure access control by integrated user-management,
comprehensive backup-, restore- and update functionalities
LAN @Node-RED: CAN, RS485 and RS232 LAN: S7-Ethernet and Mod us-TCP
Activated by Node-RED: Easy data exchange by additional
protocols to communicate to different kinds of field devices
like energy meters, decentral I/Os, FCs, etc.
Communicate by RFC1006 (S7-communication,
active Put/Get) easily and ith all Siemens-S7-CPUs
Integrate energy meters into your system by Modbus-TCP.
openVPN: secure S7-communication MQTT: on oard configuration
Setup of openVPN-connections including certificate-management by
onboard-configuration to connect 2 S7-islands completely ithout
portal or cloud. Or as simple secure remote maintenance.
Data handling ith MQTT-brokers
as (pubishing or subscribing) client.
Services @ NodeRED: Create own value Dash oard @ NodeRED: we visualization for free
Use imported data points in available Node-RED-nodes
to multiple different services and create a
unique selling proposition and added value
Visualize imported data points in available
Node-RED-nodes as dashboard and provide
it as free eb visualization
INSEVIS Gesellschaft für industrielle Systemelektronik und Visualisierung mbH • Am Weichselgarten 7 • D-91058 Erlangen 7
Manual Gate ay, Rev. 04 / 2020

Product family S7-IIoT Gateways
Technical data
S7-IIoT-Gateway
for 35mm DIN-rail
Standard configuration:
RS232
(for Node-RED-projects)
RS485
(for Node-RED-projects)
- ith s itchable teminate
resistors for RS485
CAN
(for Node-RED-projects)-
- ith s itchable teminate
resistors)
Ethernet with
- RFC1006
(S7-communication,
Send/ Receive (active)
- Modbus-TCP
Switch
for operation mode
State LEDs for
Po er, Update, Error, Run
Inserting stripes
(for Logo and identification)
- thereby customized
adaption possible easy
Scope of delivery:
- Grounding terminal
- Technical data sheet
Image: view of GC300T
Importand information to data transfer direction
for download- and upload procedures:
Starting from the PC the IIoT-Gate ay is situated
in the internet, so the data ill be
•send there by UPLOAD from the PC and
•received from there by DOWNLOAD into the PC.
Starting from PC the HMI / PLC are situated in
the control- or field layer; so the data ill be
•send there by DOWNLOAD from the PC and
•received from there by UPLOAD into the PC.
8 INSEVIS Gesellschaft für industrielle Systemelektronik und Visualisierung mbH • Am Weichselgarten 7 • D-91058 Erlangen
Manual Gate ay, Rev. 04 / 2020

Product family S7-IIoT Gateways
Technical data
Dimensions W x H x D (mm)
Cut out W x H (mm)
Protection class
Weight
28 x 116 x 84
35mm DIN rail
IP41
ca. 350g
Operating temperature range
Storage temperature range
-20°C ... +60°C ( ithout condensation)
-30°C ... +80°C
Connection technology removable connector ith 2 bolt flanges aside
(cage clamp technology) for cross section up to max. 1,5mm2
Load voltage L+ 24V DC (11 V ... 30V DC)
Start-up current < 3A
Technical data CPU
CPU-type Typ T (GC300T)
Working memory 256 MByte
internal memory 4 GByte, thereof ca. 1 GByte for user data (visualizations, etc)
Programming languages
Programming system
JavaScript
Node-RED
Serial interfaces
(protocols)
COM1: RS 232 (via Node-RED)
COM2: RS 485 (via Node-RED)
Ethernet (protocols) ETHERNET: 10/100 MBit
S7-communication (active put/get), Modbus-TCP
(more by Node-RED)
OPC UA Server
SecurityPolicy
Predefined namespace,compatible to S7-1500
+ max. 100 user-variables
alternatively user defined namespace ith external modeler (via binary data export)
optionally OPC UA DI
able to provide datapoints from all other interfaces including history
history configurable in sample time and number of samples
subscriptions: max. 8
monitored items per subscription: max. 200
monitored items total: max. 500
none / Basic 256 Sha 256 sign / Basic 256 Sha 256 sign & encrypt
(can be enabled and disabled separately)
MQTT Client (subscriber / publisher)
Node-RED performance limit approx. 50 variables actualise cyclic
data points from all other interfaces
CAN (protocols) Baudrate 10 kBaud ... 1 MBaud – via Node-RED
Data security open source packages OpenSSH and OpenVPN
INSEVIS Gesellschaft für industrielle Systemelektronik und Visualisierung mbH • Am Weichselgarten 7 • D-91058 Erlangen 9
Manual Gate ay, Rev. 04 / 2020

Commissioning
The IIoT-Gate ay is shipped ith LAN-address 192.168.80.60. If the o n net differs from it, act as follo s:
•Connect LAN-interface of the IIoT-Gate ay (Do not mix it ith the WAN-interface)
ith the LAN- interface of your computer.
•Assign your PC an IP-address in the subnet of the IIoT-Gate ay (for example 192.168.80.65).
•For the first configuration of the IIoT-Gate ay open a compatible bro ser
(see technical data sheet) in your computer. and enter the IP-address of the IIoT-Gate ay
•If the bro ser informs about a security risk, add an exceptional rule.
The login credentials for the first login are
Name admin
Pass ord admin
ATTENTION:
The Admin-pass ord must be changed for security reasons immediately after first login!
Change no the IP-address of the IIoT-Gate ay as ritten belo :
•Navigate to : System / Network and
•insert at LAN Address a ne IP-address, hich fits into your local net.
•By Save to device (lo er right) the ne settings ill be applied.
Restore IP-address
It is easy to detect a forgotten IP-address:
•S itch from run → service mode to
•restart by po er OFF/ON (boots 1-2min).
•in service mode the LAN IP address of the IIoT gate ay is al ays 192.168.80.60
•on the default address 192.168.80.60 that mask (belo ) appears.
If not → clear the bro ser cache or reload the page in your bro ser!
•Left at “Net ork” is displayed the assigned LAN-address (here: 192.168.80.60),
•than s itch service → run mode,
•restart by po er OFF/ON or press the button right in „Restart Gate ay“ (boots 1-2min),
•insert right IP-address in your bro ser and ready!
10 INSEVIS Gesellschaft für industrielle Systemelektronik und Visualisierung mbH • Am Weichselgarten 7 • D-91058 Erlangen
Manual Gate ay, Rev. 04 / 2020