Siemens SIMATIC S7-1200 CP 1243-8 IRC User manual

___________________
___________________
___________________
___________________
___________________
___________________
___________________
___________________
___________________
___________________
___________________
___________________
___________________
SIMATIC NET
S7-1200 - TeleControl
CP 1243-8 IRC
Operating Instructions
02/2018
C79000
-G8976-C385-03
Preface
Application and functions
1
LEDs and connectors
2
Installation, connecting up,
commissioning
3
Configuration
4
Program blocks
5
Diagnostics and upkeep
6
Technical data
7
Approvals
A
Dimension drawings
B
Accessories
C
STEP 7 V5 configuration of
the proxy
D
Documentation references
E

Siemens AG
Division Process Industries and Drives
Postfach 48 48
90026 NÜRNBERG
GERMANY
C79000-G8976-C385-03
Ⓟ
02/2018 Subject to change
Copyright © Siemens AG 2015 - 2018.
All rights reserved
Legal information
Warning notice system
This manual contains notices you have to observe in order to ensure your personal safety, as well as to prevent
damage to property. The notices referring to your personal safety are highlighted in the manual by a safety alert
symbol, notices referring only to property damage have no safety alert symbol. These notices shown below are
graded according to the degree of danger.
DANGER
indicates that death or severe personal injury will result if proper precautions are not taken.
WARNING
indicates that death or severe personal injury may result if proper precautions are not taken.
CAUTION
indicates that minor personal injury can result if proper precautions are not taken.
NOTICE
indicates that property damage can result if proper precautions are not taken.
If more than one degree of danger is present, the warning notice representing the highest degree of danger will
be used. A notice warning of injury to persons with a safety alert symbol may also include a warning relating to
property damage.
Qualified Personnel
The product/system described in this documentation may be operated only by
personnel qualified
for the specific
task in accordance with the relevant documentation, in particular its warning notices and safety instructions.
Qualified personnel are those who, based on their training and experience, are capable of identifying risks and
avoiding potential hazards when working with these products/systems.
Proper use of Siemens products
Note the following:
WARNING
Siemens products may only be used for the applications described in the catalog and in the relevant technical
documentation. If products and components from other manufacturers are used, these must be recommended
or approved by Siemens. Proper transport, storage, installation, assembly, commissioning, operation and
maintenance are required to ensure that the products operate safely and without any problems. The permissible
ambient conditions must be complied with. The information in the relevant documentation must be observed.
Trademarks
All names identified by ® are registered trademarks of Siemens AG. The remaining trademarks in this publication
may be trademarks whose use by third parties for their own purposes could violate the rights of the owner.
Disclaimer of Liability
We have reviewed the contents of this publication to ensure consistency with the hardware and software
described. Since variance cannot be precluded entirely, we cannot guarantee full consistency. However, the
information in this publication is reviewed regularly and any necessary corrections are included in subsequent
editions.

CP 1243-8 IRC
Operating Instructions, 02/2018, C79000-G8976-C385-03 3
Preface
Validity of this manual
This document contains information on the following product:
●
CP 1243-8 IRC
Article number 6GK7 243-8RX30-0XE0
Hardware product version 2
Firmware version V3.1
The CP is the communications processor for connection of the SIMATIC S7-1200 via
public or private infrastructures to a telecontrol master station. For information on the
telecontrol protocols used refer to the section Properties of the CP (Page 11).
With the help of VPN technology and the firewall, the CP allows protected access to the
S7-1200.
The CP can also be used as an additional Ethernet interface of the CPU for S7
communication.
Figure 1 CP 1243-8 IRC
Behind the top hinged cover of the module housing, you will see the hardware product
version to the right of the article number printed as a placeholder "X". If the printed text is, for
example, "X 2 3 4", "X" would be the placeholder for hardware product version 1.
You will find the MAC address under the lower hinged cover of the housing.
Purpose of the manual
This manual describes the properties of this module and supports you when installing and
commissioning it.
The required configuration steps are described as an overview and there are explanations of
the relationship between firmware functions and configuration.

Preface
CP 1243-8 IRC
4Operating Instructions, 02/2018, C79000-G8976-C385-03
You will also find information about the diagnostics options of the device.
Product names and abbreviations
The following short forms are used in this document:
●
CP
The short form is used instead of the full product name "CP 1243-8 IRC".
●
IRC
Industrial Remote Communication
●
STEP 7
Short form for the following versions of the configuration tool STEP 7:
–STEP 7 V5
–STEP 7 Basic
The short form "STEP 7" is only used when the product is self-explanatory in the
particular context.
For information on the product versions, refer to the section Requirements for operation
(Page 23).
●
Proxy
"PROXY CP1243-8 IRC", substitute module for the CP 1243-8 IRC in the catalog of
STEP 7 V5 / HW Config.
●
ST7
Short form for the telecontrol protocol "SINAUT ST7"
New in this issue
Connection to SINEMA Remote Connect of the above firmware version
Replaced manual issue
Edition 07/2017
Current manual release on the Internet
You will also find the current version of this manual on the Internet pages of Siemens
Industry Online Support at the following address:
Link: (https://support.industry.siemens.com/cs/ww/en/ps/21162/man)
Required experience
To install, commission and operate the CP, you require experience in the following areas:
●Automation engineering
●Setting up the SIMATIC S7-1200 system
●SIMATIC STEP 7 Basic

Preface
CP 1243-8 IRC
Operating Instructions, 02/2018, C79000-G8976-C385-03 5
Requirements for use of the module
You will find the requirements for using the module in the section Requirements for operation
(Page 23).
Cross references
In this manual there are often cross references to other sections.
To be able to return to the initial page after jumping to a cross reference, some PDF readers
support the command <Alt>+<left arrow>.
Sources of information and other documentation
You will find an overview of further reading and references in the Appendix of this manual.
License conditions
Note
Open source software
The product contains open source software. Read the license conditions for open source
software carefully before using the product.
You will find the license conditions on the supplied data medium:
●OSS_CP1243-8_99.pdf
Security information
Siemens provides products and solutions with industrial security functions that support the
secure operation of plants, systems, machines and networks.
In order to protect plants, systems, machines and networks against cyber threats, it is
necessary to implement – and continuously maintain – a holistic, state-of-the-art industrial
security concept. Siemens’ products and solutions constitute one element of such a concept.
Customers are responsible for preventing unauthorized access to their plants, systems,
machines and networks. Such systems, machines and components should only be
connected to an enterprise network or the internet if and to the extent such a connection is
necessary and only when appropriate security measures (e.g. firewalls and/or network
segmentation) are in place.
Additionally, Siemens’ guidance on appropriate security measures should be taken into
account. For additional information on industrial security measures that may be
implemented, please visit
Link: (http://www.siemens.com/industrialsecurity)
Siemens’ products and solutions undergo continuous development to make them more
secure. Siemens strongly recommends that product updates are applied as soon as they are
available and that the latest product versions are used. Use of product versions that are no
longer supported, and failure to apply the latest updates may increase customers’ exposure
to cyber threats.

Preface
CP 1243-8 IRC
6Operating Instructions, 02/2018, C79000-G8976-C385-03
To stay informed about product updates, subscribe to the Siemens Industrial Security RSS
Feed under
Link: (http://www.siemens.com/industrialsecurity)
For the security functions, see also the following section:
Security functions (Page 20)
Security recommendations (Page 55)
Security (Page 104)
Firmware
The firmware is signed and encrypted. This ensures that only firmware created by Siemens
can be downloaded to the device.
SIMATIC NET glossary
Explanations of many of the specialist terms used in this documentation can be found in the
SIMATIC NET glossary.
You will find the SIMATIC NET glossary here:
●SIMATIC NET Manual Collection or product DVD
The DVD ships with certain SIMATIC NET products.
●On the Internet under the following entry ID:
Link: (https://support.industry.siemens.com/cs/ww/en/view/50305045)
Training, Service & Support
You will find information on Training, Service & Support in the multi--language document
"DC_support_99.pdf" on the data medium supplied with the documentation.
Recycling and disposal
The product is low in pollutants, can be recycled and meets the requirements of the WEEE
directive 2012/19/EU "Waste Electrical and Electronic Equipment".
Do not dispose of the product at public disposal sites. For environmentally friendly recycling
and the disposal of your old device contact a certified disposal company for electronic scrap
or your Siemens contact.
Keep to the local regulations.
You will find information on returning the product on the Internet pages of Siemens Industry
Online Support:
Link: (https://support.industry.siemens.com/cs/ww/en/view/109479891)

CP 1243-8 IRC
Operating Instructions, 02/2018, C79000-G8976-C385-03 7
Table of contents
Preface ................................................................................................................................................... 3
1 Application and functions ...................................................................................................................... 11
1.1 PG routing...............................................................................................................................11
1.2 Properties of the CP................................................................................................................11
1.3 Communications services.......................................................................................................14
1.4 Connection to SINEMA RC.....................................................................................................17
1.5 Other services and properties.................................................................................................19
1.6 Security functions....................................................................................................................20
1.7 Performance data and configuration limits .............................................................................22
1.8 Requirements for operation ....................................................................................................23
1.9 Configuration examples ..........................................................................................................25
1.9.1 Configurations with the ST7 protocol......................................................................................25
1.9.2 Configurations with the DNP3 / IEC protocols ........................................................................31
1.9.3 Remote maintenance with SINEMA RC .................................................................................34
1.10 Expansion of SINAUT projects ...............................................................................................35
1.10.1 Modules for new SINAUT projects and those to be expanded...............................................35
1.10.2 Requirements for the expansion.............................................................................................37
2 LEDs and connectors............................................................................................................................ 39
2.1 Opening the covers of the housing .........................................................................................39
2.2 LEDs .......................................................................................................................................40
2.3 Electrical connectors...............................................................................................................45
2.3.1 Power supply ..........................................................................................................................45
2.3.2 Ethernet interface X1P1..........................................................................................................46
2.3.3 Serial connection for TS module.............................................................................................46
3 Installation, connecting up, commissioning............................................................................................ 47
3.1 Important notes on using the device.......................................................................................47
3.1.1 Notices about use in hazardous areas ...................................................................................47
3.1.2 Notices about use in hazardous areas according to ATEX ....................................................48
3.1.3 Notices about use in hazardous areas according to UL HazLoc............................................49
3.2 Installing, connecting up and commissioning .........................................................................49
3.3 Note on operation ...................................................................................................................54
4 Configuration ........................................................................................................................................ 55
4.1 Security recommendations .....................................................................................................55
4.2 Required STEP 7 products .....................................................................................................58
4.3 Overview: Connection to LAN / WAN .....................................................................................59

Table of contents
CP 1243-8 IRC
8Operating Instructions, 02/2018, C79000-G8976-C385-03
4.4 Basic communication mechanisms........................................................................................ 61
4.4.1 Addressing, authentication, connections (single / redundant) ............................................... 61
4.4.1.1 ST7......................................................................................................................................... 61
4.4.1.2 DNP3 / IEC............................................................................................................................. 63
4.4.2 Connection establishment...................................................................................................... 64
4.4.3 Acknowledgment.................................................................................................................... 65
4.5 Configuration in STEP 7 Basic............................................................................................... 66
4.6 Communication types ............................................................................................................ 67
4.7 Telecontrol via SINEMA RC................................................................................................... 68
4.8 Ethernet interface................................................................................................................... 70
4.8.1 WAN settings ......................................................................................................................... 70
4.8.2 CP identification ..................................................................................................................... 71
4.8.3 Time-of-day synchronization.................................................................................................. 72
4.8.4 Ethernet addresses................................................................................................................ 72
4.8.5 Advanced options .................................................................................................................. 72
4.8.5.1 MSC protocol settings............................................................................................................ 72
4.8.5.2 TCP connection monitoring.................................................................................................... 74
4.8.5.3 Transmission settings - ST7 .................................................................................................. 75
4.8.5.4 Transmission settings – DNP3............................................................................................... 75
4.8.5.5 Transmission settings - IEC ................................................................................................... 77
4.8.6 Access to the Web server ...................................................................................................... 79
4.9 Serial interface ....................................................................................................................... 79
4.9.1 Configuration of the serial interface ....................................................................................... 79
4.9.2 Configuring a TS module ....................................................................................................... 80
4.9.3 WAN settings ......................................................................................................................... 81
4.9.4 WAN parameters (networking the CP)................................................................................... 82
4.9.5 Advanced options .................................................................................................................. 84
4.9.5.1 Dedicated line ........................................................................................................................ 84
4.9.5.2 Dialup network ....................................................................................................................... 86
4.10 Partner stations...................................................................................................................... 90
4.10.1 Importing configuration data (ST7) ........................................................................................ 90
4.10.2 Partners (DNP3 / IEC) ........................................................................................................... 91
4.11 Communication with the CPU ................................................................................................ 95
4.11.1 Communication with the CPU ................................................................................................ 95
4.11.2 CP diagnostics ....................................................................................................................... 96
4.11.3 Partner status / path status .................................................................................................... 97
4.12 Time-of-day synchronization................................................................................................ 100
4.13 SMSC................................................................................................................................... 103
4.14 Subscriber numbers............................................................................................................. 103
4.15 SNMP................................................................................................................................... 104
4.16 Security ................................................................................................................................ 104
4.16.1 Security user ........................................................................................................................ 105
4.16.2 MSC authentication.............................................................................................................. 105
4.16.3 DNP3 security options ......................................................................................................... 106
4.16.4 Firewall................................................................................................................................. 108
4.16.4.1 Pre-check of messages by the MAC firewall. ...................................................................... 108

Table of contents
CP 1243-8 IRC
Operating Instructions, 02/2018, C79000-G8976-C385-03 9
4.16.4.2 Firewall settings for configured connection connections via a VPN tunnel ..........................108
4.16.4.3 Settings for online security diagnostics and downloading to station with the firewall
activated................................................................................................................................109
4.16.4.4 Notation for the source IP address (advanced firewall mode)..............................................109
4.16.5 Time-of-day synchronization.................................................................................................109
4.16.6 E-mail configuration ..............................................................................................................110
4.16.7 Log settings - Filtering of the system events ........................................................................111
4.16.8 VPN.......................................................................................................................................111
4.16.8.1 VPN (Virtual Private Network) ..............................................................................................111
4.16.8.2 Addressing the CP when using VPN ....................................................................................112
4.16.8.3 Creating a VPN tunnel for S7 communication between stations ..........................................113
4.16.8.4 VPN communication with SOFTNET Security Client (PC / engineering station)..................115
4.16.8.5 CP as passive subscriber of VPN connections ....................................................................115
4.16.8.6 SYSLOG ...............................................................................................................................116
4.16.8.7 SINEMA Remote Connect ....................................................................................................116
4.16.9 SNMP....................................................................................................................................118
4.16.10 Certificate manager...............................................................................................................120
4.16.11 Handling certificates..............................................................................................................120
4.17 Creating telecontrol connections for the ST7 communication ..............................................122
4.18 Data points............................................................................................................................128
4.18.1 Data point configuration........................................................................................................128
4.18.2 Syntax of the data point names ............................................................................................135
4.18.3 Datapoint types .....................................................................................................................135
4.18.4 Status IDs of the data points.................................................................................................141
4.18.5 "General" tab.........................................................................................................................143
4.18.6 Configuration of the data point index ....................................................................................144
4.18.7 Process image, type of transmission, event classes ............................................................144
4.18.8 Read cycle ............................................................................................................................147
4.18.9 "Trigger“ tab ..........................................................................................................................148
4.18.10 Threshold value trigger .........................................................................................................150
4.18.11 Analog value preprocessing .................................................................................................152
4.18.12 Command output ..................................................................................................................158
4.18.13 Partner stations.....................................................................................................................163
4.18.13.1 Partner configuration for ST7 data points .............................................................................163
4.18.13.2 Partner configuration for DNP3 and IEC data points............................................................163
4.19 Messages..............................................................................................................................163
4.19.1 Message configuration..........................................................................................................163
4.19.2 Character set for messages..................................................................................................166
5 Program blocks................................................................................................................................... 167
5.1 Program blocks for OUC.......................................................................................................167
5.2 Changing the IP address during runtime ..............................................................................169
6 Diagnostics and upkeep ...................................................................................................................... 171
6.1 Diagnostics options...............................................................................................................171
6.2 Online security diagnostics via port 8448 .............................................................................174
6.3 Online functions and TeleService .........................................................................................174
6.4 SNMP....................................................................................................................................175

Table of contents
CP 1243-8 IRC
10 Operating Instructions, 02/2018, C79000-G8976-C385-03
6.5 Processing status of messages ........................................................................................... 177
6.6 Downloading firmware ......................................................................................................... 179
6.7 Module replacement ............................................................................................................ 182
7 Technical data .....................................................................................................................................183
7.1 Technical specifications of the CP ....................................................................................... 183
7.2 Pin assignment of the socket for the external power supply ............................................... 184
7.3 Pinout of the Ethernet interface ........................................................................................... 185
A Approvals ............................................................................................................................................187
B Dimension drawings.............................................................................................................................191
C Accessories .........................................................................................................................................193
C.1 TS modules .......................................................................................................................... 193
C.1.1 The TS modules................................................................................................................... 193
C.1.2 TS Module Modem............................................................................................................... 195
C.1.3 TS Module ISDN .................................................................................................................. 197
C.1.4 TS Module RS232................................................................................................................ 198
C.1.5 TS Module GSM................................................................................................................... 200
C.2 Modems and routers ............................................................................................................ 202
C.2.1 Dedicated line and dialup network modems ........................................................................ 202
C.2.2 MODEM MD720................................................................................................................... 203
C.2.3 Router SCALANCE M.......................................................................................................... 207
C.3 Antennas .............................................................................................................................. 208
C.4 Connecting cables ............................................................................................................... 210
C.4.1 Connecting cables for connecting the CP to Ethernet ......................................................... 210
C.4.2 Connecting cables for connecting the modem of the TS Module RS232 ............................ 210
C.4.3 Connecting cables of the MDx modem................................................................................ 213
D STEP 7 V5 configuration of the proxy...................................................................................................215
D.1 Configuration in STEP 7 V5 ................................................................................................. 215
D.2 Special features of the PROXY CP1243-8 IRC ................................................................... 216
D.3 SINAUT configuration .......................................................................................................... 220
D.4 Exporting configuration data ................................................................................................ 221
E Documentation references ...................................................................................................................225
Index ...................................................................................................................................................229

CP 1243-8 IRC
Operating Instructions, 02/2018, C79000-G8976-C385-03 11
Application and functions
1
1.1
PG routing
PG routing between telecontrol modules
PG routing is supported between the modules listed in the table and via the specified media.
A requirement for the CPs is that the options "S7 communication" and "Online functions" are
enabled in the "Communication types" parameter group.
Module
Medium (protocol)
TIM 1531 IRC
TIM 4R-IE
TIM 3V-IE / TIM
3V-IE Advanced
CP 1243-8 IRC
CP 1542SP-1 IRC
TIM 1531 IRC
Ethernet (S7)
Ethernet (MSC)
RS-232
Ethernet (S7)
Ethernet (MSC)
-
Ethernet (S7)
Ethernet (MSC)
-
Ethernet (S7) Ethernet (S7)
TIM 4R-IE
Ethernet (S7)
Ethernet (MSC)
-
Ethernet (S7)
Ethernet (MSC)
RS-232
Ethernet (S7)
Ethernet (MSC)
RS-232
-
-
TIM 3V-IE
Ethernet (S7)
Ethernet (MSC)
-
Ethernet (S7)
Ethernet (MSC)
RS-232
Ethernet (S7)
Ethernet (MSC)
RS-232
-
-
CP 1243-8 IRC
Ethernet (S7)
-
-
-
-
CP 1542SP-1 IRC
Ethernet (S7)
-
-
-
-
"RS-232" means communication via dedicated line or dialup network.
See the performance data and the configuration limits for the number of supported
connections.
See also
Performance data and configuration limits (Page 22)
1.2
Properties of the CP
Application, protocols and communications partners
The CP is intended for operation in a SIMATIC S7-1200 automation system. The CP is the
communications processor for connection of the S7-1200 via public or private infrastructures
to a telecontrol master station.

Application and functions
1.2 Properties of the CP
CP 1243-8 IRC
12 Operating Instructions, 02/2018, C79000-G8976-C385-03
Supported telecontrol protocols
Depending on the firmware version the CP supports the following protocols.
●
Firmware version V2.1
–SINAUT ST7
●
Firmware version V3
–SINAUT ST7
–DNP3
–IEC 60870-5
You will find the supported transmission protocols and network types in the section
Communications services (Page 14).
Application
The CP can be used in the following systems:
●
SINAUT ST7 system
In existing SINAUT systems in which the ST7 protocol is used, the CP can be used with
the functions of TIM 3V-IE Advanced.
If used for this purpose note the instructions below on configuration.
●
New ST7 systems
New systems with S7-1200 stations in which the ST7 protocol is used.
●
Existing DNP3 or IEC systems
In existing systems in which the DNP3 or the IEC protocol is used, the CP can be used
as the communications processor of the SIMATIC S7-1200.
Communications partners
The interfaces of the CP support the network node type "station". A master station can be
connected as the communications partner of the CP. When using the ST7 protocol, a master
station or node station can be connected.
Depending on the firmware version of the CP, a master station with one of the following
applications can be connected.
●
Firmware version V2.1
The following master station applications are possible:
–SINAUT ST7cc
–SINAUT ST7sc
–SIMATIC PCS 7 / WinCC TC
–SIMATIC WinCC OA
–A SINAUT master station or node station

Application and functions
1.3 Communications services
CP 1243-8 IRC
Operating Instructions, 02/2018, C79000-G8976-C385-03 13
●
Firmware version V3
When using the "DNP3" protocol:
–DNP3 master
When using the "IEC 60870-5" protocol
–IEC master
When using the "ST7" protocol:
–SINAUT ST7cc
–SINAUT ST7sc
–SIMATIC PCS 7 / WinCC TC
–SIMATIC WinCC OA
–A SINAUT master station or node station
Configuration of the CP
●New ST7 systems, DNP3 systems, IEC systems
To configure the CP in new systems with one of the telecontrol protocols named above
use STEP 7 Basic.
In these systems use a CP with firmware version V3.
●Existing ST7 systems
In existing SINAUT systems with SIMATIC stations of the families S7-300/400 and the
TIM modules for remote transfer, the CP can be used for expansions by S7-1200
stations.
In these systems that were configured with STEP 7 V5, use a CP with firmware version
V2.1.
To configure the CP, you require the two following STEP 7 products:
–STEP 7 V5
and
–STEP 7 Basic
For information on the required STEP 7 versions, see section Requirements for operation
(Page 23).

Application and functions
1.3 Communications services
CP 1243-8 IRC
14 Operating Instructions, 02/2018, C79000-G8976-C385-03
1.3
Communications services
The following communications services are supported:
Telecontrol communication
The CP is the communications processor for connection of the SIMATIC S7-1200 via public
or private infrastructures to a telecontrol master station. You will find the possible application
of the telecontrol master station in the section Properties of the CP (Page 11).
The telecontrol protocol "ST7"
For telecontrol communication, the CP uses the ST7 protocol on the application layer (OSI
layer 7) for communication via different telecontrol networks.
Functions and services of the telecontrol protocol
●
Communication with the control center
An S7-1200 station with a CP 1243-8 IRC communicates via LAN/WAN with the master
station.
●
SMS / E-mail
Event-driven, the CP can send SMS messages to mobile telephones and e-mails to PCs
with an Internet connection.
–SMS messages can be sent if the CP is connected to a mobile wireless network via
the RS-232 interface.
–If the CP is connected, e-mails can be sent via the Ethernet interface.
Both types of messages are configured in telecontrol communication in STEP 7 Basic.
The use of program blocks is not necessary here. For information on the configuration,
see section Message configuration (Page 163).
●
Inter-station communication
In dedicated line networks and with communication via the mobile wireless network and
the Internet (GSM/MSC), the CP supports inter-station communication between S7-1200
stations via the master station.
With inter-station communication, the CP establishes a connection to the master station.
The master station forwards the frames to the destination station.
The partners for inter-station communication must already have been created in the
STEP 7 V5 project.
●
Direct communication
In dial-up networks and Ethernet networks, there is direct communication between the
subscribers.

Application and functions
1.3 Communications services
CP 1243-8 IRC
Operating Instructions, 02/2018, C79000-G8976-C385-03 15
Security protocols
Simple communication via the mobile wireless network (GSM) and the Internet can be
achieved with the MSC transmission protocol. If the security requirements are higher, the
transmission protocols (OSI layer 3) listed below can be used.
●
MSC
Can be used with S7 communication
Simple Internet communication via the Internet (DSL)
The MSC protocol supports authentication of the communications partners and simple
encryption of data. A user name and a password are included in the encryption. An MSC
tunnel is established between the MSC station and MSC master station.
●
MSCsec
Can be used with S7 communication
Secure Internet communication using:
–Internet (DSL)
or
–Mobile wireless network (GSM) + Internet (DSL)
MSCsec supports authentication of the communications partners and data encryption
with a user name and password. In addition to this, the shared automatically generated
key is renewed between the communications partners at configurable intervals.
●
IPsec (VPN)
Highly secure communication via mobile wireless and the Internet (DSL).
Communication via a mobile wireless network combined with the Internet is made
possible by the router SCALANCE M. The SCALANCE M product series provides various
VPN routers with IPsec and encryption software and their own firewall.
For a description of the configurable Security functions, refer to the section Security
(Page 104).
You will find an overview of the possible transmission options in the section Overview:
Connection to LAN / WAN (Page 59).
DNP3
Communication is based on the DNP3 SPECIFICATION Version 2.x (2007/2009).
The CP is a communications processor of the SIMATIC S7-1200 for system connection to
control centers using the DNP3 protocol for telecontrol applications.
An S7-1200 with a CP functions as a DNP3 station (Outstation).
The CP supports implementation level 1 - 4 (DNP3 Application Layer protocol Level). You
will find a description of the other functions in the section Partners (DNP3 / IEC) (Page 91).
IEC 60870-5
The communication is based on the specification IEC 60870-5 Part 1 - 5 (1990 - 1995) and
Part 104 (2000).

Application and functions
1.3 Communications services
CP 1243-8 IRC
16 Operating Instructions, 02/2018, C79000-G8976-C385-03
The CP is a communications processor of the SIMATIC S7-1200 for system connection to
control centers using the IEC 60870-5 protocol for telecontrol applications.
An S7-1200 with a CP functions as a substation (slave).
Communication via SINEMA Remote Connect
Supported as of firmware version V3.1. See section Connection to SINEMA RC (Page 17).
Networks and network nodes
Network types
The CP makes telecontrol communication possible via the following network types:
●Industrial Ethernet
●Dedicated line / wireless network
●Analog dial-up network, ISDN network
●Mobile wireless networks
–GSM/GPRS (2G)
With 2.5G router SCALANCE M874-2
–UMTS (3G)
With 3G router SCALANCE M874-3
–LTE
With router SCALANCE M876-4
●IP-based wireless networks
For information on connecting the CP to various network types, refer to the section
Overview: Connection to LAN / WAN (Page 59).
Network node types
The CP with the firmware version described here (see Preface) and configured in STEP 7
V14.0 SP1 supports the following network node types:
●Station
●Node station
Depending on the transmission protocol being used, one of the following transmission
modes can be configured in STEP 7 V5:
●GPRS station
●MSC station
●Neutral

Application and functions
1.4 Connection to SINEMA RC
CP 1243-8 IRC
Operating Instructions, 02/2018, C79000-G8976-C385-03 17
S7 communication and PG/OP communication
Reading / writing data from / to a CPU via the mobile wireless network is possible if S7
communication is enabled in the configuration of the CP.
The CP supports the following functions:
●
PUT/GET
The CP supports the function as client (program blocks) and server for data exchange
with remote stations (S7-300/400/1200/1500).
●
S7 routing
Communication between stations via S7 connections
●
PG functions
●
Operator control and monitoring functions (HMI)
You will find details on the program blocks in the information system of STEP 7 Basic.
For S7 communication, the CP requires a fixed IP address.
Communication via Open User Communication (OUC)
Via the Ethernet interface of the CP and the program blocks of the Open User
Communication on the CPU the CP has the following communication options:
●Communication with SIMATIC stations via S7 connections
●Sending e-mails
In contrast to the corresponding service of telecontrol communication (see above), to
transfer e-mails via OUC, the TMAIL_C program block needs to be used, see section
Program blocks (Page 167).
1.4
Connection to SINEMA RC
Communication via SINEMA Remote Connect (SINEMA RC)
The "SINEMA RC Server" application provides end-to-end connection management of
distributed networks via the Internet. This also includes secure remote access to lower-level
stations. Communication between SINEMA RC Server and the remote devices takes place
via a VPN tunnel with consideration of the stored access rights.
SINEMA RC uses OpenVPN for encryption of the data. The center of the communication is
SINEMA RC Server via which communication runs between the subscribers and that
manages the configuration of the communications system.
SCALANCE M routers, which you can use for the connection, also support OpenVPN and
connection to SINEMA Remote Connect.
For the CP firmware version required for communication via SINEMA RC see section
Communications services (Page 14).
The CP can also handle telecontrol communication via the SINEMA RC server.

Application and functions
1.4 Connection to SINEMA RC
CP 1243-8 IRC
18 Operating Instructions, 02/2018, C79000-G8976-C385-03
Parameter groups
You configure communication via SINEMA RC and telecontrol communication via SINEMA
RC in two parameter groups:
●Communication via SINEMA RC:
> "Security > VPN"
●Telecontrol communication via SINEMA RC:
> "Communication types"
For information on the supported protocols and configuration, see section Telecontrol via
SINEMA RC (Page 68).
Applications
The following application options of the CP result from the combination of the parameters for
telecontrol communication and SINEMA RC:
●(1) No telecontrol and no SINEMA RC (CP for network separation only)
●(2) CP only for remote maintenance via SINEMA RC
●(3) CP for telecontrol communication only
●(4) CP uses telecontrol communication, but SINEMA RC only for remote maintenance.
●(5) CP uses SINEMA RC for telecontrol communication and remote maintenance.
The table provides an overview of the applications with the respective parameter settings.
●"On" means that the parameter is activated.
●"Off" means that the parameter is deactivated.
Table 1- 1 Use cases and parameters to be activated
Use case
Parameter settings
(Parameters abbreviated) *
SRC
TC
TC-SRC
(1)
Off
Off
Off
(2)
On
Off
Off
(3) Off On Off
(4)
On
On
Off
(5) On On On
*
Explanation of the parameter abbreviations:
SRC
- Security > VPN (activated) > "VPN connection type":
"Automatic OpenVPN configuration via SINEMA Remote Connect Server"
TC
- Communication types > Telecontrol communication enabled
TC-SRC
- Communication types >
"Activate telecontrol communication via SINEMA Remote Connect"

Application and functions
1.5 Other services and properties
CP 1243-8 IRC
Operating Instructions, 02/2018, C79000-G8976-C385-03 19
1.5
Other services and properties
Other services and properties
●
Data point configuration
Due to the data point configuration in STEP 7 Basic, programming program blocks in
order to transfer the process data is unnecessary. The process data is configured as
individual data points and transferred one-to-1 to the master station.
●
IP configuration
Characteristics of the IP configuration of the Ethernet interface of the CP:
–The CP supports IP addresses according to IPv4.
–Address assignment:
The IP address, the subnet mask and the address of a gateway can be set manually
in the configuration.
As an alternative, the IP address can be obtained from a DHCP server or by other
means outside the configuration.
●
Time-of-day synchronization
For information on the method and configuration, refer to the section Time-of-day
synchronization (Page 100).
For information on the format of the time stamp of the frames, refer to the section
Datapoint types (Page 135).
●
Access to the Web server of the CPU
With the aid of the Web server of the CPU, you can read out module data from the
station.
●
Send buffer
The CP saves the values of data points configured as an event in the send buffer.
The data is not saved retentively. It is lost in case of a power outage.
●
Event-driven transfer of process data
The CP transmits the data from the send buffer individually or bundled to the
communication partner. The transfer can be triggered by various triggers.
●
Analog value processing
Analog values can be preprocessed on the CP according to various methods.

Application and functions
1.6 Security functions
CP 1243-8 IRC
20 Operating Instructions, 02/2018, C79000-G8976-C385-03
●
Online functions
From an engineering station (ES) on which STEP 7 is installed, you can use the online
functions of STEP 7 via the Ethernet interface of the CP to access the S7-1200 CPU if
the station is located in the same IP subnet.
The following online functions are available:
–Downloading project or program data from the STEP 7 project to the station
–Querying diagnostics data on the station
–Downloading firmware files to the CP
For a remote station located in a different IP subnet or that can be reached via the
Internet, these functions can only be used if the ES (with CP 1628 or via SCALANCE S)
is connected to the station via a VPN tunnel.
●
SNMP
As an SNMP agent, the CP supports data queries using SNMP (Simple Network
Management Protocol).
For more detailed information, refer to section SNMP (Page 175).
1.6
Security functions
With Industrial Ethernet Security, individual devices, automation cells or network segments
of an Ethernet network can be protected.
Read the information in the section Security recommendations (Page 55) for planning and
configuring your networks.
Security functions of the telecontrol and transmission protocols
For the telecontrol communication, the following Security functions can be activated:
●
ST7
The transmission protocols that can be used by the CP for telecontrol communication via
the ST7 protocol support the following Security functions:
–
MSC
The MSC protocol supports authentication of the communications partners and simple
encryption of data. A user name and a password are included in the encryption. An
MSC tunnel is established between the MSC station and MSC master station.
–
MSCsec
MSCsec supports authentication of the communications partners and data encryption
with a user name and password. In addition to this, the shared automatically
generated key is renewed between the communications partners at configurable
intervals.
●
DNP3
The security functions specific to DNP3 can be used.