Siemens CP 1243-7 LTE User manual

___________________
___________________
___________________
___________________
___________________
___________________
___________________
___________________
___________________
___________________
___________________
___________________
SIMATIC NET
S7-1200 - TeleControl
CP 1243-7 LTE
Operating Instructions
CP 1243-7 LTE-EU
CP 1243
-7 LTE-US
04/2017
C79000
-G8976-C381-03
Preface
Application and properties
1
LEDs and connectors
2
Installation, connecting up,
commissioning
3
Configuration
4
Program blocks
5
Diagnostics and upkeep
6
Technical specifications
7
Dimension drawings
A
Approvals
B
Accessories
C
Documentation references
D

Siemens AG
Division Process Industries and Drives
Postfach 48 48
90026 NÜRNBERG
GERMANY
C79000-G8976-C381-03
Ⓟ
05/2017 Subject to change
Copyright © Siemens AG 2015 - 2017.
All rights reserved
Legal information
Warning notice system
This manual contains notices you have to observe in order to ensure your personal safety, as well as to prevent
damage to property. The notices referring to your personal safety are highlighted in the manual by a safety alert
symbol, notices referring only to property damage have no safety alert symbol. These notices shown below are
graded according to the degree of danger.
DANGER
indicates that death or severe personal injury will result if proper precautions are not taken.
WARNING
indicates that death or severe personal injury may result if proper precautions are not taken.
CAUTION
indicates that minor personal injury can result if proper precautions are not taken.
NOTICE
indicates that property damage can result if proper precautions are not taken.
If more than one degree of danger is present, the warning notice representing the highest degree of danger will
be used. A notice warning of injury to persons with a safety alert symbol may also include a warning relating to
property damage.
Qualified Personnel
The product/system described in this documentation may be operated only by
personnel qualified
for the specific
task in accordance with the relevant documentation, in particular its warning notices and safety instructions.
Qualified personnel are those who, based on their training and experience, are capable of identifying risks and
avoiding potential hazards when working with these products/systems.
Proper use of Siemens products
Note the following:
WARNING
Siemens products may only be used for the applications described in the catalog and in the relevant technical
documentation. If products and components from other manufacturers are used, these must be recommended
or approved by Siemens. Proper transport, storage, installation, assembly, commissioning, operation and
maintenance are required to ensure that the products operate safely and without any problems. The permissible
ambient conditions must be complied with. The information in the relevant documentation must be observed.
Trademarks
All names identified by ® are registered trademarks of Siemens AG. The remaining trademarks in this publication
may be trademarks whose use by third parties for their own purposes could violate the rights of the owner.
Disclaimer of Liability
We have reviewed the contents of this publication to ensure consistency with the hardware and software
described. Since variance cannot be precluded entirely, we cannot guarantee full consistency. However, the
information in this publication is reviewed regularly and any necessary corrections are included in subsequent
editions.

CP 1243-7 LTE
Operating Instructions, 04/2017, C79000-G8976-C381-03 3
Preface
Validity of this manual
This document contains information on the following product:
●CP 1243-7 LTE-EU
Article number 6GK7 243-7KX30-0XE0
Hardware product version 2
Firmware version V3.0
Communications processor for connection of the SIMATIC S7-1200 via LTE, UMTS or
GSM mobile wireless networks, European standard
●CP 1243-7 LTE-US
Article number 6GK7 243-7SX30-0XE0
Hardware product version 2
Firmware version V3.0
Communications processor for connection of the SIMATIC S7-1200 via LTE- or UMTS
mobile wireless networks, North American standard (AT&T certified)
Figure 1 CP 1243-7 LTE
Behind the top hinged cover of the module housing, next to the article number you will see
the hardware product version printed as a placeholder "X" (for example X 2 3 4). In this case,
"X" would be the placeholder for hardware product version 1.
You will find the firmware version of the CP as supplied behind the top hinged cover of the
housing to the left below the LED field.
You will find the IMEI under the lower hinged cover of the housing.

Preface
CP 1243-7 LTE
4Operating Instructions, 04/2017, C79000-G8976-C381-03
Abbreviations/acronyms
●
CP / submodule / module
Simplified designation of the CP 1243-7 LTE-EU / CP 1243-7 LTE-USCP 1243-7 LTE-EU
/ CP 1243-7 LTE-US
●
TCSB
TeleControl Server Basic V3, OPC server for telecontrol communication
●
Mobile wireless network
The mobile wireless network(s) that support or use the relevant CP.
The precise standards and frequency bands which the two CPs support can be found in
the sections Connecting the S7-1200 to a mobile wireless network (Page 11) and
Technical specifications (Page 133).
Purpose of the manual
This manual describes the properties of these modules and supports you when installing and
commissioning the device.
The necessary configuration steps are described in the form of an overview.
You will also find instructions for operation and information about the diagnostics options of
the device.
New in this issue
●New hardware product version 2
●New functions in the firmware version named above include:
–Sending messages even without telecontrol communication
–Changed behavior during time-of-day synchronization, see section Time-of-day
synchronization (Page 47).
–Extended diagnostic functions
●Functional improvement of data point configuration as of STEP 7 V14 SP1. see section
Data point configuration (Page 76).
●Editorial revision
Replaced manual issue
Edition 05/2016
Current manual release on the Internet
You will also find the current version of this manual on the Internet pages of Siemens
Industry Online Support at the following address:
Link: (https://support.industry.siemens.com/cs/ww/en/ps/15924/man)

Preface
CP 1243-7 LTE
Operating Instructions, 04/2017, C79000-G8976-C381-03 5
Required experience
To install, commission and operate the CP, you require experience in the following areas:
●Automation engineering
●Setting up the SIMATIC S7-1200
●SIMATIC STEP 7 Basic / Professional
●Data transfer via mobile wireless networks and Internet
Cross references
In this manual there are often cross references to other sections.
To be able to return to the initial page after jumping to a cross reference, some PDF readers
support the command <Alt>+<left arrow>.
Sources of information and other documentation
You will find an overview of further reading and references in the Appendix of this manual.
License conditions
Note
Open source software
Read the license conditions for open source software carefully before using the product.
You will find license conditions in the following document on the supplied data medium:
●OSS_CP124x7_86.pdf
Security information
Siemens provides products and solutions with industrial security functions that support the
secure operation of plants, systems, machines and networks.
In order to protect plants, systems, machines and networks against cyber threats, it is
necessary to implement – and continuously maintain – a holistic, state-of-the-art industrial
security concept. Siemens’ products and solutions only form one element of such a concept.
Customer is responsible to prevent unauthorized access to its plants, systems, machines
and networks. Systems, machines and components should only be connected to the
enterprise network or the internet if and to the extent necessary and with appropriate security
measures (e.g. use of firewalls and network segmentation) in place.
Additionally, Siemens’ guidance on appropriate security measures should be taken into
account. For more information about industrial security, please visit
Link: (http://www.siemens.com/industrialsecurity)
Siemens’ products and solutions undergo continuous development to make them more
secure. Siemens strongly recommends to apply product updates as soon as available and to

Preface
CP 1243-7 LTE
6Operating Instructions, 04/2017, C79000-G8976-C381-03
always use the latest product versions. Use of product versions that are no longer supported,
and failure to apply latest updates may increase customer’s exposure to cyber threats.
To stay informed about product updates, subscribe to the Siemens Industrial Security RSS
Feed under
Link: (http://www.siemens.com/industrialsecurity)
Firmware
The firmware is signed and encrypted. This ensures that only firmware created by Siemens
can be downloaded to the device.
Recycling and disposal
The product is low in pollutants, can be recycled and meets the requirements of the WEEE
directive 2012/19/EU "Waste Electrical and Electronic Equipment".
Do not dispose of the product at public disposal sites. For environmentally friendly recycling
and the disposal of your old device contact a certified disposal company for electronic scrap
or your Siemens contact.
Keep to the local regulations.
You will find information on returning the product on the Internet pages of Siemens Industry
Online Support:
Link: (https://support.industry.siemens.com/cs/ww/en/view/109479891)
SIMATIC NET glossary
Explanations of many of the specialist terms used in this documentation can be found in the
SIMATIC NET glossary.
You will find the SIMATIC NET glossary here:
●SIMATIC NET Manual Collection or product DVD
The DVD ships with certain SIMATIC NET products.
●On the Internet under the following address:
Link: (https://support.industry.siemens.com/cs/ww/en/view/50305045)
Training, Service & Support
You will find information on Training, Service & Support in the multi-language document
"DC_support_99.pdf" on the data medium supplied with the documentation.

CP 1243-7 LTE
Operating Instructions, 04/2017, C79000-G8976-C381-03 7
Table of contents
Preface ................................................................................................................................................... 3
1 Application and properties..................................................................................................................... 11
1.1 Connecting the S7-1200 to a mobile wireless network...........................................................11
1.2 Communications services.......................................................................................................13
1.3 Other services and properties.................................................................................................15
1.4 Security functions....................................................................................................................16
1.5 Configuration limits and performance data.............................................................................18
1.6 Requirements for operation ....................................................................................................20
1.7 Configuration examples ..........................................................................................................22
2 LEDs and connectors............................................................................................................................ 27
2.1 Opening the housing...............................................................................................................27
2.2 LEDs .......................................................................................................................................28
2.3 Electrical connectors...............................................................................................................31
2.3.1 Power supply ..........................................................................................................................31
2.3.2 Wireless interface ...................................................................................................................32
3 Installation, connecting up, commissioning............................................................................................ 33
3.1 Important notes on using the device.......................................................................................33
3.1.1 Notices on use in hazardous areas ........................................................................................33
3.1.2 Notes on use in hazardous areas according to ATEX / IECEx ..............................................34
3.1.3 Notices regarding use in hazardous areas according to UL HazLoc .....................................35
3.2 Installing the CP and commissioning......................................................................................35
3.3 Notes on operation..................................................................................................................40
4 Configuration ........................................................................................................................................ 41
4.1 Security recommendations .....................................................................................................41
4.2 Configuration in STEP 7 .........................................................................................................44
4.3 Information required for configuration.....................................................................................45
4.4 Time-of-day synchronization...................................................................................................47
4.5 Communication types .............................................................................................................50
4.6 Mobile wireless communications settings...............................................................................51
4.7 Ethernet interface (X1)............................................................................................................53
4.7.1 Access to the Web server.......................................................................................................56
4.8 Partner stations.......................................................................................................................57
4.8.1 Partner stations > Telecontrol server......................................................................................57
4.8.2 Acknowledgment.....................................................................................................................60

Table of contents
CP 1243-7 LTE
8Operating Instructions, 04/2017, C79000-G8976-C381-03
4.8.3 Connection establishment...................................................................................................... 60
4.8.4 Partner for inter-station communication................................................................................. 61
4.9 DNS configuration .................................................................................................................. 62
4.10 Communication with the CPU ................................................................................................ 62
4.11 Security .................................................................................................................................. 65
4.11.1 CP identification ..................................................................................................................... 66
4.11.2 Firewall................................................................................................................................... 67
4.11.2.1 Notation for the source IP address (advanced firewall mode)............................................... 67
4.11.2.2 Firewall settings for configured connection connections via a VPN tunnel ........................... 67
4.11.3 Authorized phone numbers.................................................................................................... 67
4.11.4 E-mail configuration ............................................................................................................... 68
4.11.5 Log settings - Filtering of the system events ......................................................................... 69
4.11.6 VPN........................................................................................................................................ 69
4.11.6.1 VPN (Virtual Private Network)................................................................................................ 69
4.11.6.2 Addressing the CP when using VPN ..................................................................................... 70
4.11.6.3 Creating a VPN tunnel for S7 communication between stations ........................................... 70
4.11.6.4 Communications partners in a VPN group ............................................................................ 72
4.11.6.5 Connection to the telecontrol server ...................................................................................... 73
4.11.6.6 CP as passive subscriber of VPN connections...................................................................... 73
4.11.6.7 SYSLOG ................................................................................................................................ 73
4.11.7 Certificate manager................................................................................................................ 74
4.11.8 Handling certificates............................................................................................................... 74
4.12 Data point configuration ......................................................................................................... 76
4.12.1 Data point configuration ......................................................................................................... 76
4.12.2 Datapoint types ...................................................................................................................... 83
4.12.3 Syntax of the data point names ............................................................................................. 84
4.12.4 Process image, type of transmission, event classes, triggers ............................................... 84
4.12.5 Status IDs of data points........................................................................................................ 87
4.12.6 Data point index ..................................................................................................................... 88
4.12.7 Read cycle ............................................................................................................................. 89
4.12.8 "Trigger“ tab ........................................................................................................................... 90
4.12.9 Threshold value trigger .......................................................................................................... 91
4.12.10 Analog value preprocessing................................................................................................... 93
4.12.11 Partner stations: Configuring the inter-station communication .............................................. 99
4.12.11.1 Options for specifying the communications partner............................................................... 99
4.13 Messages............................................................................................................................. 100
4.14 Permitted characters in the configuration ............................................................................ 103
5 Program blocks....................................................................................................................................105
5.1 Program blocks for OUC...................................................................................................... 105
5.2 Programming SMS messages via OUC .............................................................................. 107
5.3 TC_CONFIG for changing configuration data of the CP...................................................... 110
5.4 IF_CONF: SDT for the configuration data of the CP............................................................ 113

Table of contents
CP 1243-7 LTE
Operating Instructions, 04/2017, C79000-G8976-C381-03 9
6 Diagnostics and upkeep ...................................................................................................................... 119
6.1 Diagnostics options...............................................................................................................119
6.2 Processing status of messages ............................................................................................122
6.3 Loading firmware ..................................................................................................................124
6.4 Module replacement .............................................................................................................127
6.5 TeleService ...........................................................................................................................127
6.5.1 Configuration of the TeleService access ..............................................................................127
6.5.2 Establishment of a TeleService connection..........................................................................129
7 Technical specifications ...................................................................................................................... 133
7.1 General technical specifications ...........................................................................................133
7.2 Technical specifications - wireless interface (CP 1243-7 LTE-EU) ......................................134
7.3 Technical specifications - wireless interface (CP 1243-7 LTE-US) ......................................135
7.4 Pin assignment of the socket for the external power supply ................................................136
A Dimension drawings............................................................................................................................ 137
B Approvals............................................................................................................................................ 139
C Accessories ........................................................................................................................................ 147
C.1 Antenna.................................................................................................................................147
C.2 TS Gateway ..........................................................................................................................147
D Documentation references .................................................................................................................. 151
Index................................................................................................................................................... 153

Table of contents
CP 1243-7 LTE
10 Operating Instructions, 04/2017, C79000-G8976-C381-03

CP 1243-7 LTE
Operating Instructions, 04/2017, C79000-G8976-C381-03 11
Application and properties
1
1.1
Connecting the S7-1200 to a mobile wireless network
The CP is intended for use in industrial environments.
Mobile wireless standards, frequency bands
Using the CP, the S7-1200 SIMATIC controller can be connected to mobile wireless
networks of the following standards:
●
CP 1243-7 LTE
-
EU
The CP supports the following mobile wireless standards:
–LTE
–UMTS
–GSM
●
CP 1243-7 LTE
-
US
The CP is certifies by AT&T supports the following mobile wireless standards:
–LTE
–UMTS
–GSM
You will find the supported frequency bands in the section Technical specifications
(Page 133).
Unless explicitly stated differently in the following manual, the telecontrol communication
relates to connections to a telecontrol server with the application TCSB (TeleControl Server
Basic V3).
Changing the mobile wireless standard if the network is not available
If the establishment of a connection via a mobile wireless network with the LTE standard
fails, the CP attempts to dial in to an available network with the next lower mobile wireless
standard. The following fallback behavior applies:
●CP 1243-7 LTE-EU: LTE → UMTS → GSM
●CP 1243-7 LTE-US: LTE → UMTS → GSM (if network exists)
This is only possible if the corresponding mobile wireless standard is enabled in the
configuration of the CP.
National approvals
In countries in which the CP is approved, you will find this on the Internet on the pages of
Siemens Industry Online Support. You will find the link in the section Approvals (Page 139).

Application and properties
1.1 Connecting the S7-1200 to a mobile wireless network
CP 1243-7 LTE
12 Operating Instructions, 04/2017, C79000-G8976-C381-03
Communication types
The CP allows the following types of WAN communication:
●
Telecontrol communication
WAN communication between S7-1200 stations and the telecontrol server (TCSB) in the
master station
●
Inter-station communication
Communication between stations and the master station (telecontrol communication)
●
Direct communication
Direct inter-station communication between stations (Open User Communication) via
program blocks
IP-based WAN communication via mobile wireless networks
The CP allows WAN communication from remote stations with a master station,
communication between stations via a master station (inter-station communication) and
direct communication between stations.
The CP supports the following services for communication via the mobile wireless network or
via the mobile wireless network and the Internet:
●Data services
Transfer of process data via mobile wireless networks with the following standards:
–
GPRS / EDGE
(General Packet Radio Service)
The packet-oriented services for data transmission GPRS/EDGE are handled via the
GSM network.
Note
No CDMA
The CP is not suitable for GSM networks in which the code multiplex method
"Code
Division Multiple Access" (CDMA) is used.
–
UMTS / HSPA
(Universal Mobile Telecommunications System) / (High Speed Packet Access)
UMTS allows significantly higher transmission speeds than GSM.
HSPA is a further development of UMTS and once again allows higher transmission
speeds.
–LTE
(Long Term Evolution)
Mobile wireless specification with a higher transmission speed than UMTS.

Application and properties
1.2 Communications services
CP 1243-7 LTE
Operating Instructions, 04/2017, C79000-G8976-C381-03 13
●SMS
(Short Message Service)
The CP can send and receive SMS messages.
●E-mail
The CP can send e-mails via mobile wireless and the Internet.
1.2
Communications services
The CP is intended for use in an industrial environment. The following applications are
supported by the CP:
Telecontrol communication
The following applications are possible if telecontrol communication is enabled in the
configuration of the CP.
●Communication with a control center
Remote S7-1200 stations communicate via the mobile wireless network and the Internet
with a telecontrol server in the master station. The telecontrol server communicates with a
higher-level control system using the integrated OPC server function.
●Event-driven sending of messages using SMS or e-mail
Via the mobile wireless network, the CP sends SMS messages to mobile phones or e-
mails to PCs with an Internet connection.
Both types of messages are configured in telecontrol communication in STEP 7. The use
of program blocks is not necessary.
For information on the configuration, refer to sections E-mail configuration (Page 68) and
Messages (Page 100).
●Inter-station communication between S7-1200 stations via the telecontrol server
In this application, the CP establishes a connection to the telecontrol server via the
mobile wireless network. The telecontrol server forwards the messages to the destination
station.
For this communications service, the CP and TCSB use their own protocol on OSI layer 7
that among other things supports certain security functions, see section Security functions
(Page 16).

Application and properties
1.2 Communications services
CP 1243-7 LTE
14 Operating Instructions, 04/2017, C79000-G8976-C381-03
Direct communication via Open User Communication (OUC)
The program blocks of Open User Communication provide the CP with the following
communication options:
●Communication between S7-1200 stations via the mobile wireless network
For this, the CP must be assigned a fixed IP address, see section Other services and
properties (Page 15).
●SMS and e-mail messages via the mobile wireless network
–Sending and receiving SMS messages on mobile phones or S7 stations
–Sending e-mails to PCs with an Internet connection
In contrast to the two corresponding services of telecontrol communication (see above),
to transfer SMS messages/e-mails via OUC, program blocks need to be used, see
section Program blocks for OUC (Page 105).
You will find examples of applications in the section Configuration examples (Page 22).
S7 communication
Reading / writing data from / to a CPU via the mobile wireless network is possible if S7
communication is enabled in the configuration of the CP.
The following instructions are supported:
●PUT / GET
You will find details on the program blocks in the information system of STEP 7
For S7 communication, the CP requires a fixed IP address, see section Other services and
properties (Page 15).
TeleService via the mobile wireless network
TeleService is possible if the online functions are enabled in the configuration of the CP.
A TeleService connection can be established between an engineering station (PC with
STEP 7) and a remote S7-1200 station via the mobile wireless network and the Internet.
You can use the TeleService connection for the following purposes:
●Downloading project or program data from the STEP 7 project to the station
●Querying diagnostics data on the station
You will find application examples of the structure in the section Configuration examples
(Page 22).
For more detailed information, refer to section Establishment of a TeleService connection
(Page 129).

Application and properties
1.3 Other services and properties
CP 1243-7 LTE
Operating Instructions, 04/2017, C79000-G8976-C381-03 15
1.3
Other services and properties
Other services and properties
●
Data point configuration
Due to the data point configuration in STEP 7, programming program blocks in order to
transfer the process data is unnecessary. The individual data points are processed one-
to-one in the control system.
●
IP configuration
The CP is assigned a dynamic or a fixed IP address by the mobile wireless network
provider:
–Dynamic IP address
When using telecontrol communication, the mobile wireless network provider generally
assigns the CP a dynamic IP address. You set this in STEP 7 in the parameter group
"Ethernet interface > Ethernet addresses".
–Fixed IP address
To use S7 communication or to receive data via Open User Communication, the CPU
must be reachable via a fixed IP address. In this case, enter the fixed IP address
assigned by the mobile wireless network provider in the same parameter group.
●
Time-of-day synchronization
The CP supports various methods of time-of-day synchronization. You will find
information in the section Time-of-day synchronization (Page 47).
For information on the format of the time stamp, refer to the section Datapoint types
(Page 83).
●
Access to the Web server of the CPU
With the aid of the Web server of the CPU, you can read out module data from the
station.
●
Data buffering: Storage of event data
If a connection fails, the CP can buffer the data of events of different classes and transfer
them bundled to the telecontrol server.
●
Data transfer is on request or triggered
The telecontrol communication with TCSB is triggered in two ways:
–After a request by TCSB or an OPC client connected to TCSB
–Triggered by various selectable criteria

Application and properties
1.4 Security functions
CP 1243-7 LTE
16 Operating Instructions, 04/2017, C79000-G8976-C381-03
Logging status data and its transfer to the telecontrol server
e. g.
–Data volumes transferred
–ID of the wireless cell in the area of the station
–GSM signal strength
–Communication status
etc.
●
Analog value processing
Analog values can be preprocessed on the CP according to various methods.
●
Diagnostics SMS message
At the request of a mobile phone, the CP sends an SMS message with diagnostics data
to this mobile phone.
1.4
Security functions
Security functions of the telecontrol protocol
The CP supports the following security functions:
●
TeleControl Basic
–
Encrypted telecontrol communication
As an integrated (unconfigurable) security function, the TeleControl Basic protocol
encrypts the data for transfer.
You configure the interval of the key exchange between the CP and telecontrol server
in STEP 7 in the parameter group "Ethernet interface (X1) > Advanced options >
Transmission settings".
–
Authorized phone numbers
To authorize nodes allowed to establish a connection to the CP (e.g. mobile phones),
an authorized phone number is configured for each subscriber.
–
Telecontrol password
To authenticate the CP with the telecontrol server
●
STARTTLS / SMTPS
For the secure transfer of e-mails
●
NTP (secure)
For secure transfer during time-of-day synchronization with telecontrol communication
disabled
●
HTTPS
For secure access to the Web server of the CPU

Application and properties
1.4 Security functions
CP 1243-7 LTE
Operating Instructions, 04/2017, C79000-G8976-C381-03 17
Note
Plants with security requirements - recommendation
Use the following option:
•
If you have systems with high security requirements, use the secure protocols
NTP (secure) and HTTPS.
•
If you connect to public networks, you should use the firewall. Think about the services
you want to allow access to the station via public networks. By using the "bandwidth
limitation" of the firewall, you can restrict the possibility of flooding and DoS attacks.
Industrial Ethernet Security - Security functions of the CP
The following security functions can be used independently of telecontrol communication.
With Industrial Ethernet Security, individual devices, automation cells or network segments
of an IP-based network can be protected. The data transfer via the CP can be protected from
the following attacks by a combination of different security measures:
●Data espionage
●Data manipulation
●Unauthorized access
Secure underlying networks can be operated via additional Ethernet/PROFINET interfaces of
the CPU.
As a result of using the CP as a security module, the following additional security functions
are accessible to the S7-1200 station on the interface to the external network:
●
Firewall
–IP firewall with stateful packet inspection (layer 3 and 4)
–Firewall also for "non-IP" Ethernet frames according to IEEE 802.3 (layer 2)
–Limitation of the transmission speed ("Bandwidth limitation")
–Global firewall rules
●
Communication made secure by IPsec tunnels (VPN)
VPN tunnel communication allows the establishment of a secure IPsec tunnel for
communication with a security module.
The CP can be put together with other modules to form VPN groups during configuration.
IPsec tunnels (VPN) are created between all security modules of a VPN group. All
internal nodes of these security modules can communicate securely with each other
through these tunnels.
●
Logging
To allow monitoring, events can be stored in log files that can be read out using the
configuration tool or can be sent automatically to a Syslog server.
For information on configuring the security functions, refer to the section Auto-Hotspot.
You will find further information on the functionality and configuration of the security functions
in the information system of STEP 7 and in the manual /5/ (Page 152).

Application and properties
1.5 Configuration limits and performance data
CP 1243-7 LTE
18 Operating Instructions, 04/2017, C79000-G8976-C381-03
1.5
Configuration limits and performance data
Number of simultaneous connections for telecontrol communication
●1 reserved connection for user data exchange with the telecontrol server
Number of simultaneous TeleService connections
●Max. 1 TeleService connection
Number of simultaneous connections for S7 communication and Open User Communication
A maximum total of 22 connection resources for S7 communication and Open User
Communication (OUC)Open User Communication (OUC)
The maximum number can be divided up as follows into:
●S7 connections: Maximum 8
–(PUT/GET)
●OUC connections Maximum 8
–TCP connections
–ISO-on-TCP connections
–UDP connections
●Additional free resources for S7 or OUC connections: Maximum 6
Number of connections to NTP servers
●Max. 1 connection to an NTP server
Number of possible partners for inter-station communication
●Max. 13 CPs as partners for inter-station communication
Of which:
–Sending
Max. 3 partners
Note: In total along with the telecontrol server it is possible to send to max. 4 partners.
The send buffer would divide itself up proportionately with 4 partners, i.e. 16000 event
messages for each partner.
–Receiving
Max. 10 partners
●Partners can be S7-1200 CPs with data point configuration and use of the protocol
"TeleControl Basic".

Application and properties
1.5 Configuration limits and performance data
CP 1243-7 LTE
Operating Instructions, 04/2017, C79000-G8976-C381-03 19
User data
With the connection types listed below, the user data of a frame represent a consistent data
area in terms of the time of transfer.
User data per frame with the various connection types:
●For TCP connections: Max. 8192 bytes
●For ISO-on-TCP connections: Max. 1452 bytes
●For UDP connections: Max. 1472 bytes
With frames of telecontrol communication, the individual values of the data points are time
stamped.
Number of data points for the data point configuration
The maximum number of configurable data points is 200.
Frame memory (send buffer)
The CP has a frame memory (send buffer) for data points configured as an event.
The send buffer has a maximum size of 64 000 events divided into equal parts for all
configured communications partners. The size of the frame memory can be set in STEP 7.
See also section Process image, type of transmission, event classes, triggers (Page 84).
Messages: E-mail / SMS
Up to 10 messages can be configured in STEP 7 and sent as e-mails or SMS messages.
Maximum number of characters that can be transferred per SMS message: 160 ASCII
characters including any value sent at the same time
Maximum number of characters that can be transferred per e-mail: 256 ASCII characters
including any value sent at the same time
IPsec tunnel (VPN)
An IPsec tunnel can be established for secure communication with another Security module.
Firewall rules
The maximum number of firewall rules in advanced firewall mode is limited to 256.
The firewall rules are divided up as follows:
●Maximum 226 rules with individual addresses
●Maximum 30 rules with address ranges or network addresses
(e.g. 140.90.120.1 - 140.90.120.20 or 140.90.120.0/16)
●Maximum 128 rules with limitation of the transmission speed ("Bandwidth limitation")

Application and properties
1.6 Requirements for operation
CP 1243-7 LTE
20 Operating Instructions, 04/2017, C79000-G8976-C381-03
1.6
Requirements for operation
Hardware requirements
Apart from the CP. the following hardware is required in the S7-1200:
●CP
The requirement for the firmware version V3 of the CP is a CP with hardware product
version 2.
●A CPU with firmware version as of V3
The full functionality of the CP is only available with a CPU as of V4.2.
●An external antenna for the CP
Use only the antenna from the accessories program for the CP, refer to the appendix
Antenna (Page 147).
●For telecontrol communication, a PC with an Internet connection is required for the
telecontrol server in the master station.
●If you intend to use TeleService via mobile wireless, a TeleService gateway with Internet
access is required for configurations without a telecontrol server. This is a PC on which
the "TS Gateway" software is installed, see appendix TS Gateway (Page 147).
Configuration software
To use the full range of functions the following configuration tool is required to configure the
module:
STEP 7 Basic V14.0 + SP1
Program blocks for Open User Communication and S7 communication
For Open User Communication and S7 communication, program blocks are required, see
section Communications services (Page 13).