Siemens CP 1243-1 PCC User manual

CP 1243-1 PCC
___________________
___________________
___________________
___________________
___________________
___________________
___________________
___________________
___________________
___________________
___________________
SIMATIC NET
S7-1200 - TeleControl
CP 1243-1 PCC
Operating Instructions
02/2015
C79000
-G8976-C384-01
Preface
Application and properties
1
Requirements for use
2
LEDs and connectors
3
Installation, connecting up,
commissioning
4
Configuration and operation
5
Diagnostics and upkeep
6
Technical specifications
7
Approvals
A
Dimension drawings
B
Documentation references
C
Siemens Automation

Siemens AG
Division Process Industries and Drives
Postfach 48 48
90026 NÜRNBERG
GERMANY
C79000-G8976-C384-01
Ⓟ
01/2015 Subject to change
Copyright © Siemens AG 2015.
All rights reserved
Legal information
Warning notice system
This manual contains notices you have to observe in order to ensure your personal safety, as well as to prevent
damage to property. The notices referring to your personal safety are highlighted in the manual by a safety alert
symbol, notices referring only to property damage have no safety alert symbol. These notices shown below are
graded according to the degree of danger.
DANGER
indicates that death or severe personal injury will result if proper precautions are not taken.
WARNING
indicates that death or severe personal injury may result if proper precautions are not taken.
CAUTION
indicates that minor personal injury can result if proper precautions are not taken.
NOTICE
indicates that property damage can result if proper precautions are not taken.
If more than one degree of danger is present, the warning notice representing the highest degree of danger will
be used. A notice warning of injury to persons with a safety alert symbol may also include a warning relating to
property damage.
Qualified Personnel
The product/system described in this documentation may be operated only by
personnel qualified
for the specific
task in accordance with the relevant documentation, in particular its warning notices and safety instructions.
Qualified personnel are those who, based on their training and experience, are capable of identifying risks and
avoiding potential hazards when working with these products/systems.
Proper use of Siemens products
Note the following:
WARNING
Siemens products may only be used for the applications described in the catalog and in the relevant technical
documentation. If products and components from other manufacturers are used, these must be recommended
or approved by Siemens. Proper transport, storage, installation, assembly, commissioning, operation and
maintenance
are required to ensure that the products operate safely and without any problems. The permissible
ambient conditions must be complied with. The information in the relevant documentation must be observed.
Trademarks
All names identified by ® are registered trademarks of Siemens AG. The remaining trademarks in this publication
may be trademarks whose use by third parties for their own purposes could violate the rights of the owner.
Disclaimer of Liability
We have reviewed the contents of this publication to ensure consistency with the hardware and software
described. Since variance cannot be precluded entirely, we cannot guarantee full consistency. However, the
information in this publication is reviewed regularly and any necessary corrections are included in subsequent
editions.

CP 1243-1 PCC
Operating Instructions, 02/2015, C79000-G8976-C384-01 3
Preface
Validity of this manual
This document contains information on the following product:
●
CP 1243-1 PCC
Article number6GK7 243-1HX30-0XE0
Hardware product version 2
Firmware version V2.0
The CP 1243-1 PCC for Plant Cloud Communication / Data Driven Services is the
communications processor for connecting the SIMATIC S7-1200 via a public
infrastructure (e.g. DSL) to an operation center.
The integrated Plant Cloud Communication of the CP for connection and transfer of data
values to a operation center can be used for the service offer of Industry Services, e.g.
Asset Analytics Services. Communication with other cloud servers is not supported.
Information on Asset Analytics and Industry Services:
Asset Analytics (http://support.automation.siemens.com/WW/view/en/92377679)
Industry Services (http://www.industry.siemens.com/services)
The CP transfers the required data to the communications partner, the operation center.
To obtain a prediction of the status of your system or your devices, the operation center
collects and analyzes the transferred data.
With the help of a firewall, the CP allows protected access to the S7-1200.
The CP can also be used as an additional interface of the CPU for S7 communication.
Siemens Automation

Preface
CP 1243-1 PCC
4Operating Instructions, 02/2015, C79000-G8976-C384-01
Figure 1 CP 1243-1 PCC
Behind the top hinged cover of the module housing, you will see the hardware product
version to the right of the article number printed as a placeholder "X". If the printed text is, for
example, "1 X 3 4", "X" would be the placeholder for hardware product version 2.
You will find the firmware version of the CP as supplied behind the top hinged cover of the
housing to the left below the LED field.
You will find the MAC address under the lower hinged cover of the housing.
Product names and abbreviations
●
Operation center
This abbreviation will be used below instead of the full term "Plant Cloud in the operation
center".
●
CP
The term "CP" is used below instead of the full product name CP 1243-1 PCC.
●
STEP 7
This short form will be used below for the STEP 7 Basic / Professional configuration tool.

Preface
CP 1243-1 PCC
Operating Instructions, 02/2015, C79000-G8976-C384-01 5
Purpose of the manual
This manual describes the properties of this module and supports you when installing and
commissioning it.
The required configuration steps are described as an overview and there are explanations of
the relationship between firmware functions and configuration.
You will also find information about the diagnostics options of the device.
Current manual release on the Internet
You will also find the current version of this manual on the Internet pages of Siemens
Industry Online Support in the directory with following entry ID:
51297224 (http://support.automation.siemens.com/WW/view/en/51297224)
Required experience
To install, commission and operate the CP, you require experience in the following areas:
●Automation engineering
●Setting up the SIMATIC S7-1200
●SIMATIC STEP 7 Basic / Professional
Requirements for use of the module
You will find the requirements for using the module in the section Hardware requirements
(Page 15).
Sources of information and other documentation
You will find an overview of further reading and references in the Appendix of this manual.
SIMATIC NET glossary
Explanations of many of the specialist terms used in this documentation can be found in the
SIMATIC NET glossary.
You will find the SIMATIC NET glossary here:
●SIMATIC NET Manual Collection or product DVD
The DVD ships with certain SIMATIC NET products.
●On the Internet under the following entry ID:
50305045 (http://support.automation.siemens.com/WW/view/en/50305045)
Siemens Automation

Preface
CP 1243-1 PCC
6Operating Instructions, 02/2015, C79000-G8976-C384-01
License conditions
Note
Open source software
Read the license conditions for open source software carefully before using the product.
You will find license conditions in the following documents on the supplied data medium:
●DOC_OSS-S7CMCP_74.pdf
●DOC_OSS-CP1243-1-PCC_76.pdf
Security information
Siemens provides products and solutions with industrial security functions that support the
secure operation of plants, solutions, machines, equipment and/or networks. They are
important components in a holistic industrial security concept. With this in mind, Siemens’
products and solutions undergo continuous development. Siemens recommends strongly
that you regularly check for product updates.
For the secure operation of Siemens products and solutions, it is necessary to take suitable
preventive action (e.g. cell protection concept) and integrate each component into a holistic,
state-of-the-art industrial security concept. Third-party products that may be in use should
also be considered. For more information about industrial security, visit
http://www.siemens.com/industrialsecurity.
To stay informed about product updates as they occur, sign up for a product-specific
newsletter. For more information, visit http://support.automation.siemens.com.
Firmware
The firmware is signed and encrypted. This ensures that only firmware created by Siemens
can be downloaded to the device.
Training, Service & Support
You will find information on Training, Service & Support in the multi--language document
"DC_support_99.pdf" on the data medium supplied with the documentation.
Trademarks
The following and possibly other names not identified by the registered trademark sign ®are
registered trademarks of Siemens AG:
SIMATIC, SIMATIC NET, SIMATIC STEP 7, SCALANCE, Operation Center

CP 1243-1 PCC
Operating Instructions, 02/2015, C79000-G8976-C384-01 7
Table of contents
Preface ................................................................................................................................................... 3
1 Application and properties....................................................................................................................... 9
1.1 Properties of the CP..................................................................................................................9
1.2 Plant Cloud Communication .....................................................................................................9
1.3 Communications services.......................................................................................................10
1.4 Other services and properties.................................................................................................11
1.5 Configuration limits and performance data.............................................................................13
2 Requirements for use............................................................................................................................ 15
2.1 Hardware requirements ..........................................................................................................15
2.2 Software requirements............................................................................................................15
3 LEDs and connectors............................................................................................................................ 17
3.1 Opening the covers of the housing .........................................................................................17
3.2 LEDs .......................................................................................................................................18
3.3 Electrical connectors...............................................................................................................20
3.3.1 Power supply ..........................................................................................................................20
3.3.2 Ethernet interface X1P1..........................................................................................................20
4 Installation, connecting up, commissioning............................................................................................ 21
4.1 Important notes on using the device.......................................................................................21
4.1.1 Notices on use in hazardous areas ........................................................................................21
4.1.2 General notices on use in hazardous areas according to ATEX............................................23
4.1.3 Notices regarding use in hazardous areas according to UL HazLoc .....................................23
4.2 Installing, connecting up and commissioning .........................................................................24
5 Configuration and operation .................................................................................................................. 29
5.1 Note on operation ...................................................................................................................29
5.2 Configuration in STEP 7 .........................................................................................................29
5.3 Address and authentication information .................................................................................31
5.4 Configuring data points and messages ..................................................................................32
5.5 Datapoint types .......................................................................................................................33
5.6 CPU scan cycle.......................................................................................................................35
5.7 Types of transmission, event classes, triggers, status identifiers...........................................36
5.8 Security functions....................................................................................................................39
5.8.1 Firewall....................................................................................................................................39
5.8.1.1 Firewall sequence when checking incoming and outgoing frames ........................................39
5.8.1.2 Notation for the source IP address (advanced firewall mode)................................................39
Siemens Automation

Table of contents
CP 1243-1 PCC
8Operating Instructions, 02/2015, C79000-G8976-C384-01
5.8.2 Filtering of the system events ................................................................................................ 39
5.9 Time-of-day synchronization.................................................................................................. 40
5.10 SNMP..................................................................................................................................... 41
5.11 STEP 7 configuration of individual parameters...................................................................... 43
5.11.1 Communication types and SNMP .......................................................................................... 43
5.11.2 Ethernet interface (X1) > Advanced options.......................................................................... 44
5.11.3 Operation center .................................................................................................................... 44
5.11.3.1 Operation center1 or Operation center2 ................................................................................ 45
5.11.4 Communication with the CPU ................................................................................................ 47
5.11.5 Data point configuration ......................................................................................................... 47
5.11.5.1 Configuring the data point names .......................................................................................... 47
5.11.5.2 Threshold value trigger and Analog value preprocessing ..................................................... 48
5.11.5.3 Analog value preprocessing................................................................................................... 49
5.11.5.4 Threshold value trigger .......................................................................................................... 52
6 Diagnostics and upkeep........................................................................................................................ 55
6.1 Diagnostics options ................................................................................................................ 55
6.2 Downloading firmware ........................................................................................................... 56
6.3 Module replacement .............................................................................................................. 59
7 Technical specifications ........................................................................................................................ 61
7.1 Technical specifications of the CP 1243-1 PCC .................................................................... 61
7.2 Pinout of the Ethernet interface ............................................................................................. 62
A Approvals ............................................................................................................................................. 63
B Dimension drawings.............................................................................................................................. 67
C Documentation references .................................................................................................................... 69
Index .................................................................................................................................................... 71

CP 1243-1 PCC
Operating Instructions, 02/2015, C79000-G8976-C384-01 9
Application and properties
1
1.1
Properties of the CP
Application
The CP is intended for operation in an S7-1200 automation system. The CP allows
connection of the S7-1200 to Industrial Ethernet or via the Internet to a plant cloud in the
operation center.
With the combination of different security functions such as firewall and protocols for data
encryption, the CP protects the station and even entire automation cells from unauthorized
access and protects the communication between the remote S7 station and the operation
centerfrom espionage and manipulation.
1.2
Plant Cloud Communication
CP data: Transferring - collecting - analyzing
To transfer data values of the CP regularly, e.g. diagnostics or maintenance data, to an
operation center:
●Set up the Plant Cloud Communication to one or two operation centers.
To obtain a prediction of the status of your system or your devices:
●Have the transferred data analyzed using this remote computing center/server of the
operation center.
Access to the analyzed data
To call up the analyzed data, you have the following options available:
●Direct access to the analyzed data.
●Within the framework of a service contract, you receive regular reports about the status of
your system or your devices.
Requirements for CP configuration
Remember the following requirements in the CP configuration for Plant Cloud
Communication:
●Activation of Plant Cloud Communication ("Communication types" parameter group).
●IP address assignment: Set the IP address manually or obtain the IP address from a
DHCP server.
Siemens Automation

Application and properties
1.3 Communications services
CP 1243-1 PCC
10 Operating Instructions, 02/2015, C79000-G8976-C384-01
●If not obtained automatically from a DHCP server:
–Assignment of the DNS server address.
●Activation of the Security functions.
●Activation of time-of-day synchronization with "Time from partner", "NTP" or "NTP
(secure)". For the communication with an operation center, give preference to the secure
method NTP (secure).
●Required from the operator of the operation center:
–Operation center key and a suitable certificate for secure and encrypted transfer of the
data.
–Operation center address (URL address of the operation center).
1.3
Communications services
The following communications services are supported:
●
Plant Cloud Communication
The CP is a communications processor of the SIMATIC S7-1200 for system connection to
a plant cloud in the operation center.
Secure communication between the CP and operation center is assured by the HTTPS
protocol.
For a description of the configurable Security functions, refer to the section Other
services and properties (Page 11).
●
S7 communication and PG/OP communication with the following functions:
–PUT/GET as client and server for data exchange with remote stations (S7-
300/400/1200/1500)
–PG functions
–Operator control and monitoring functions (HMI)

Application and properties
1.4 Other services and properties
CP 1243-1 PCC
Operating Instructions, 02/2015, C79000-G8976-C384-01 11
1.4
Other services and properties
Other services and properties
●
Data point configuration
Due to the data point configuration in STEP 7, programming program blocks in order to
transfer the process data is unnecessary. The individual data points are processed 1:1 in
the operation center.
●
IP configuration - IPv4 and IPv6
The essential features of IP configuration for the CP:
–The CP supports IP addresses according to IPv4 and IPv6.
For applications in IPv6 networks, an IPv6 address can be used in addition to an IPv4
address.
–IP address assignment:
The IP address, the subnet mask and the address of a gateway can be set manually
in the configuration.
As an alternative, the IP address can be obtained from a DHCP server or by other
means outside the configuration.
●
Time-of-day synchronization
–If Plant Cloud Communication is enabled, the CP can obtain its local time as UTC time
from the operation center or using NTP or NTP (secure). The time of day can be read
from the CPU. For the communication with an operation center, give preference to the
secure method NTP (secure). The mechanisms are described in the STEP 7
information system.
For information on the format of the time stamp, refer to the section Datapoint types
(Page 33).
For more information, refer to the section Time-of-day synchronization (Page 40).
●
Data buffering: Storage of event data
If a connection fails, the CP can buffer the data of events of different classes and transfer
them bundled to the operation center.
●
Data transfer: triggered
The Plant Cloud Communication with the operation center is started in the following way:
–Triggered by various selectable criteria.
●
Analog value processing
Analog values can be preprocessed on the CP according to various methods.
Siemens Automation

Application and properties
1.4 Other services and properties
CP 1243-1 PCC
12 Operating Instructions, 02/2015, C79000-G8976-C384-01
●
Online functions
From an engineering station (ES) on which STEP 7 is installed, you can use the online
functions of STEP 7 via the CP to access the S7-1200 CPU if the station is located in the
same IP subnet. Online access via the operation center is not possible.
The following online functions are available:
–Downloading project or program data from the STEP 7 project to the station.
–Querying diagnostics data on the station.
–Downloading firmware files to the CP.
●
SNMP
As an SNMP agent, the CP supports data queries using SNMP (Simple Network
Management Protocol) in version V1.
For more detailed information, refer to section SNMP (Page 41).
Industrial Ethernet Security
With Industrial Ethernet Security, individual devices, automation cells or network segments
of an Ethernet network can be protected. The data transfer via the CP can be protected from
the following attacks by a combination of different security measures:
●Data espionage
●Data manipulation
●Unauthorized access
Secure underlying networks can be operated via additional Ethernet/PROFINET interfaces of
the CPU.
Security functions of the CP
The CP supports the following security functions:
●
Firewall
–IP firewall with stateful packet inspection (layer 3 and 4)
–Firewall also for "non-IP" Ethernet frames according to IEEE 802.3 (layer 2)
–Limitation of the transmission speed ("Bandwidth limitation")
–Global firewall rules
●
Operation centers
Secure communication with one or two operation centers.
●
Logging
To allow monitoring, events can be stored in log files that can be read out using the
configuration tool or can be sent automatically to a Syslog server.

Application and properties
1.5 Configuration limits and performance data
CP 1243-1 PCC
Operating Instructions, 02/2015, C79000-G8976-C384-01 13
●
NTP (secure)
For secure transfer during time-of-day synchronization
●
Protection for devices and network segments
The protection provided by the firewall can cover individual devices, several devices or
even entire network segments.
Note
Plants with security requirements - recommendation
Use the following options:
•
If you have systems with high security requirements, use the secure protocols
NTP (secure) and HTTPS.
•
If you connect to public networks, you should use the firewall. Think about the services
you want to allow access to the station via public networks. By using the "bandwidth
limitation" of the firewall, you can restrict the possibility of flooding and DoS attacks.
For information on configuring the security functions, refer to the section Security functions
(Page 39).
You will find further information on the functionality and configuration of the security functions
in the information system of STEP 7 and in the manual /2/ (Page 70).
1.5
Configuration limits and performance data
Number of CMs/CPs per station
In each S7-1200 station, up to three CMs/CPs can be plugged in and configured; this allows
three CP 1243-1 PCC modules.
Connection resources
●
TCP connections
The CP can establish connections to up to 8 communications partners (S7 stations).
●
Online functions
1 connection resource is reserved for online functions.
●
S7 connections
8 connection resources for S7 connections (PUT/GET)
●
PG/OP connections
–1 connection resource for PG connections
–3 connection resources for OP connections
Siemens Automation

Application and properties
1.5 Configuration limits and performance data
CP 1243-1 PCC
14 Operating Instructions, 02/2015, C79000-G8976-C384-01
Number of data points for the data point configuration
The maximum number of configurable data points is 200.
User data
The data to be transferred by the CP is assigned to various data points in the STEP 7
configuration.
The size of the user data per data point depends on the data type of the relevant data point.
You will find details in the section Datapoint types (Page 33).
Frame memory (send buffer)
The CP has a frame memory (send buffer) for the values of data points configured as an
event.
The send buffer has a maximum size of 64 000 events divided into equal parts for all
configured communications partners. The size of the frame memory can be set in STEP 7,
refer to the section Communication with the CPU (Page 47).
You will find details of how the send buffer works (storing and sending events) as well as the
options for transferring data in the section Types of transmission, event classes, triggers,
status identifiers (Page 36).
Firewall rules
The maximum number of firewall rules in advanced firewall mode is limited to 256.
The firewall rules are divided up as follows:
●Maximum 226 rules with individual addresses
●Maximum 30 rules with address ranges or network addresses
(e.g. 140.90.120.1 - 140.90.120.20 or 140.90.120.0/16)
●Maximum 128 rules with limitation of the transmission speed ("Bandwidth limitation")

CP 1243-1 PCC
Operating Instructions, 02/2015, C79000-G8976-C384-01 15
Requirements for use
2
2.1
Hardware requirements
The following list relates to Plant Cloud Communication.
Rails, housing, cabling and other accessories are not taken into account.
Depending on the configuration of your plant, you require the following devices and firmware
versions.
Application example: Plant Cloud Communication
In the S7-1200 station:
●CPU with firmware version ≥ V3.0
For the configuration of the S7 station with CP:
Engineering station with STEP 7
2.2
Software requirements
Configuration software
To configure the CP, the following configuration tool is required:
●STEP 7 Basic / Professional V13 SP1 with HSP0112
Software for online functions
STEP 7 in the version specified above.
Siemens Automation

Requirements for use
2.2 Software requirements
CP 1243-1 PCC
16 Operating Instructions, 02/2015, C79000-G8976-C384-01

CP 1243-1 PCC
Operating Instructions, 02/2015, C79000-G8976-C384-01 17
LEDs and connectors
3
3.1
Opening the covers of the housing
Location of the display elements and the electrical connectors
The LEDs for the detailed display of the module statuses are located behind the upper cover
of the module housing.
The Ethernet connector is located behind the lower hinged cover of the module.
Opening the covers of the housing
Open the upper or lower cover of the housing by pulling it down or up as shown by the
arrows in the illustration. The covers extend beyond the housing to give you a grip.
Figure 3-1 Opening the covers of the housing
Siemens Automation

LEDs and connectors
3.2 LEDs
CP 1243-1 PCC
18 Operating Instructions, 02/2015, C79000-G8976-C384-01
3.2
LEDs
LEDs of the module
The module has various LEDs for displaying the status:
●
LED on the front panel
The "DIAG" LED that is always visible shows the basic statuses of the module.
●
LEDs below the upper cover of the housing
The LEDs below the upper cover provide more detailed information on the module status.
Table 3- 1 LED on the front panel
LED / colors
Name
Meaning
(red / green)
DIAG
Basic status of the module
Table 3- 2 LEDs below the upper cover of the housing
LED / colors
Name
Meaning
(red / green)
LINK
Status of the physical connection to Industrial Ethernet
(green)
CONNECT
Status of the connection to the operation center
Reserve (empty LED position)
(green)
SERVICE
Status of a connection for online functions
Note
LED colors when the module starts up
When the module starts
up, all its LEDs are lit for a short time. Multicolored LEDs display a
color mixture. At this point in time, the color of the LEDs is not clear.

LEDs and connectors
3.2 LEDs
CP 1243-1 PCC
Operating Instructions, 02/2015, C79000-G8976-C384-01 19
Display of the operating and communications statuses
The LED symbols in the following tables have the following significance:
Table 3- 3 Meaning of the LED symbols
Symbol
-
LED status
OFF
ON (steady light)
Flashing
Not relevant
The LEDs indicate the operating and communications status of the module according to the
following scheme:
DIAG
(red / green)
LINK
(red / green)
CONNECT
(green)
SERVICE
(green)
Meaning
Module startup (STOP → RUN) or error statuses
Power OFF
Startup - phase 1
- - Missing STEP 7 project data
- - - Running (RUN) without error
- - Backplane bus error
- - - Errors: double IP address
Connection to Industrial Ethernet
-
- - Connection to Industrial Ethernet
exists
- - - No connection to Industrial Ethernet
Connection to communications partners
- Connection established to at least
one partner,
CPU in RUN
- Connection established to at least
one partner,
CPU in STOP
- Physical connection established,
partner not responding,
CPU in RUN
- Physical connection established,
partner not responding,
CPU in STOP
Connection for online functions
-
- Connection for online functions estab-
lished
- - - No connection to engineering station
Siemens Automation

LEDs and connectors
3.3 Electrical connectors
CP 1243-1 PCC
20 Operating Instructions, 02/2015, C79000-G8976-C384-01
DIAG
(red / green)
LINK
(red / green)
CONNECT
(green)
SERVICE
(green)
Meaning
Loading firmware
Firmware being loaded.
The "DIAG" LED flashes alternating
red and green.
Firmware was successfully loaded.
Errors:
•Error loading firmware
•Internal error of the CP
remedy: Power OFF → ON
3.3
Electrical connectors
3.3.1
Power supply
Power supply
The CM is supplied with power from the backplane bus. It does not require a separate power
supply.
3.3.2
Ethernet interface X1P1
Ethernet interface
The Ethernet connector is located behind the lower hinged cover of the module. The
interface is an RJ-45 jack according to IEEE 802.3.
The pin assignment and other data relating to the Ethernet interface can be found in the
section Technical specifications (Page 61).