Siemens TIM 1531 IRC User manual

___________________
___________________
___________________
___________________
___________________
___________________
___________________
___________________
___________________
___________________
___________________
___________________
___________________
___________________
SIMATIC NET
S7-1500 - TeleControl
TIM 1531 IRC
Operating Instructions
02/2018
C79000
-G8976-C468-02
Preface
Application and functions
1
LEDs, connectors, switches,
card slot
2
Installation, connecting up,
commissioning
3
Configuration
4
Block library TeleControl
ST7
5
The Web server (WBM)
6
Diagnostics and upkeep
7
Technical specifications
8
Approvals
9
Dimension drawings
A
Accessories
B
STEP 7 V5 configuration of
the proxy
C
Documentation references
D

Siemens AG
Division Process Industries and Drives
Postfach 48 48
90026 NÜRNBERG
GERMANY
C79000-G8976-C468-02
Ⓟ
02/2018 Subject to change
Copyright © Siemens AG 2017 - 2018.
All rights reserved
Legal information
Warning notice system
This manual contains notices you have to observe in order to ensure your personal safety, as well as to prevent
damage to property. The notices referring to your personal safety are highlighted in the manual by a safety alert
symbol, notices referring only to property damage have no safety alert symbol. These notices shown below are
graded according to the degree of danger.
DANGER
indicates that death or severe personal injury will result if proper precautions are not taken.
WARNING
indicates that death or severe personal injury may result if proper precautions are not taken.
CAUTION
indicates that minor personal injury can result if proper precautions are not taken.
NOTICE
indicates that property damage can result if proper precautions are not taken.
If more than one degree of danger is present, the warning notice representing the highest degree of danger will
be used. A notice warning of injury to persons with a safety alert symbol may also include a warning relating to
property damage.
Qualified Personnel
The product/system described in this documentation may be operated only by
personnel qualified
for the specific
task in accordance with the relevant documentation, in particular its warning notices and safety instructions.
Qualified personnel are those who, based on their training and experience, are capable of identifying risks and
avoiding potential hazards when working with these products/systems.
Proper use of Siemens products
Note the following:
WARNING
Siemens products may only be used for the applications described in the catalog and in the relevant technical
documentation. If products and components from other manufacturers are used, these must be recommended
or approved by Siemens. Proper transport, storage, installation, assembly, commissioning, operation and
maintenance are required to ensure that the products operate safely and without any problems. The permissible
ambient conditions must be complied with. The information in the relevant documentation must be observed.
Trademarks
All names identified by ® are registered trademarks of Siemens AG. The remaining trademarks in this publication
may be trademarks whose use by third parties for their own purposes could violate the rights of the owner.
Disclaimer of Liability
We have reviewed the contents of this publication to ensure consistency with the hardware and software
described. Since variance cannot be precluded entirely, we cannot guarantee full consistency. However, the
information in this publication is reviewed regularly and any necessary corrections are included in subsequent
editions.

TIM 1531 IRC
Operating Instructions, 02/2018, C79000-G8976-C468-02 3
Preface
CAUTION
To prevent injury, read the manual before use.
Validity of this manual
This manual is valid for the following product:
TIM 1531 IRC
Article number: 6GK7 543-1MX00-0XE0
Hardware product version 1
Firmware version 1.1
Communications module for SIMATIC S7-1500 / S7-400 / S7-300, SINAUT ST7 protocol,
with three RJ-45 interfaces for communication via IP-based networks (WAN / LAN) and an
RS-232/RS-485 interface for communication via classic WAN networks
Figure 1 TIM 1531 IRC
You will find the the article number of the device on the top right of the housing.
You will find the hardware product version of the device printed as a placeholder "X" on the
right of the device (for example X 2 3 4). In this case, "X" would be the placeholder for
hardware product version 1.
You will find the MAC addresses of the three Ethernet interfaces at the front in the middle of
the housing.

Preface
TIM 1531 IRC
4Operating Instructions, 02/2018, C79000-G8976-C468-02
Purpose of the manual
This manual describes the properties of this device and shows application examples.
The manual supports you when installing, connecting up and commissioning the device.
The required configuration steps for the device are described.
You will also find instructions for operation and information about the diagnostics options of
the device.
New in this release
●New firmware version with the following new functions:
–Use of the TD7 variant "TD7onCPU" via program blocks on the CPU
–Options for expanding SINAUT projects configured in STEP 7 V5 to STEP 7
Professional
–PG routing
●Editorial revision
Replaced manual edition
Edition 05/2017
Required experience
To install, commission and operate the device, you require experience in the following areas:
●Setting up industrial networks with security functions
●Data transfer via WAN networks
●SIMATIC STEP 7 Professional
Abbreviations/acronyms
This manual often uses the following abbreviations/acronyms:
●
TIM / submodule / module
The names are used instead of the full product name "TIM 1531 IRC" of the device.
●
ST7
Short form for the telecontrol protocol "SINAUT ST7"
●
WBM
"WBM" is the acronym for the "Web Based Management" of the pages of the TIM Web
server for configuration and diagnostics data.
Cross references
In this manual there are often cross references to other sections.

Preface
TIM 1531 IRC
Operating Instructions, 02/2018, C79000-G8976-C468-02 5
To be able to return to the initial page after jumping to a cross reference, some PDF readers
support the command <Alt>+<left arrow>.
Current manual release on the Internet
You will also find the current version of this manual on the Internet pages of Siemens
Industry Online Support:
Link: (https://support.industry.siemens.com/cs/ww/en/ps/24710/man)
Sources of information and other documentation
You can find an overview of further reading and references in the Appendix of this manual.
License conditions
Note
Open source software
The product contains open source software.
Read the license conditions for open source
software carefully before using the product.
You will find the license conditions on the supplied data medium:
●OSS_TIM1531IRC_99.pdf
●OSS_TIM1531IRC-TI_76.pdf
Security information
Siemens provides products and solutions with industrial security functions that support the
secure operation of plants, systems, machines and networks.
In order to protect plants, systems, machines and networks against cyber threats, it is
necessary to implement – and continuously maintain – a holistic, state-of-the-art industrial
security concept. Siemens’ products and solutions constitute one element of such a concept.
Customers are responsible for preventing unauthorized access to their plants, systems,
machines and networks. Such systems, machines and components should only be
connected to an enterprise network or the internet if and to the extent such a connection is
necessary and only when appropriate security measures (e.g. firewalls and/or network
segmentation) are in place.
Additionally, Siemens’ guidance on appropriate security measures should be taken into
account. For additional information on industrial security measures that may be
implemented, please visit
Link: (http://www.siemens.com/industrialsecurity)
Siemens’ products and solutions undergo continuous development to make them more
secure. Siemens strongly recommends that product updates are applied as soon as they are
available and that the latest product versions are used. Use of product versions that are no

Preface
TIM 1531 IRC
6Operating Instructions, 02/2018, C79000-G8976-C468-02
longer supported, and failure to apply the latest updates may increase customers’ exposure
to cyber threats.
To stay informed about product updates, subscribe to the Siemens Industrial Security RSS
Feed under
Link: (http://www.siemens.com/industrialsecurity)
Firmware
The firmware is signed and encrypted. This ensures that only firmware created by Siemens
can be downloaded to the device.
Device defective
If a fault develops, please send the device to your SIEMENS service center for repair.
Repairs on-site are not possible.
Recycling and disposal
The product is low in pollutants, can be recycled and meets the requirements of the WEEE
directive 2012/19/EU "Waste Electrical and Electronic Equipment".
Do not dispose of the product at public disposal sites. For environmentally friendly recycling
and the disposal of your old device contact a certified disposal company for electronic scrap
or your Siemens contact.
Keep to the local regulations.
You will find information on returning the product on the Internet pages of Siemens Industry
Online Support:
Link: (https://support.industry.siemens.com/cs/ww/en/view/109479891)
Training, Service & Support
You will find information on training, service and support in the multilanguage document
"DC_support_99.pdf" on the Internet pages of Siemens Industry Online Support:
Link: (https://support.industry.siemens.com/cs/ww/en/view/38652101)
SIMATIC NET glossary
Explanations of many of the specialist terms used in this documentation can be found in the
SIMATIC NET glossary.
You will find the SIMATIC NET glossary on the Internet at the following address:
Link: (https://support.industry.siemens.com/cs/ww/en/view/50305045)

TIM 1531 IRC
Operating Instructions, 02/2018, C79000-G8976-C468-02 7
Table of contents
Preface ................................................................................................................................................... 3
1 Application and functions ...................................................................................................................... 13
1.1 Properties of the TIM ..............................................................................................................13
1.2 Communications services.......................................................................................................14
1.3 PG routing...............................................................................................................................17
1.4 Security functions....................................................................................................................18
1.5 Other services and properties.................................................................................................20
1.6 Configuration examples ..........................................................................................................21
1.7 Performance data and configuration limits .............................................................................25
1.8 Requirements and compatibility..............................................................................................27
1.8.1 Software requirements............................................................................................................27
1.8.2 Usable CPUs ..........................................................................................................................27
1.9 Expansion of SINAUT projects ...............................................................................................28
1.9.1 Modules for new SINAUT projects and those to be expanded...............................................28
1.9.2 Requirements for the expansion.............................................................................................29
2 LEDs, connectors, switches, card slot ................................................................................................... 31
2.1 Overview: LEDs, connectors, switches, card slot...................................................................31
2.2 LEDs .......................................................................................................................................32
2.3 Electrical connectors...............................................................................................................33
2.3.1 Ethernet interfaces (X1, X2, X3) .............................................................................................33
2.3.2 Serial interface X4...................................................................................................................34
2.3.3 X80: External power supply ....................................................................................................34
2.4 Switch......................................................................................................................................35
2.5 SD card slot ............................................................................................................................37
3 Installation, connecting up, commissioning............................................................................................ 39
3.1 Important notes on using the device.......................................................................................39
3.1.1 Notes on use in hazardous areas ...........................................................................................40
3.1.2 Notes on use in hazardous areas according to ATEX / IECEx ..............................................41
3.1.3 Notes on use in hazardous areas according to UL HazLoc and FM ......................................42
3.2 Installation...............................................................................................................................43
3.3 Wiring......................................................................................................................................45
3.4 Inserting the SD card ..............................................................................................................47
3.5 Commissioning .......................................................................................................................48
3.6 Startup - LED pattern ..............................................................................................................49

Table of contents
TIM 1531 IRC
8Operating Instructions, 02/2018, C79000-G8976-C468-02
4 Configuration ........................................................................................................................................ 51
4.1 Security recommendations .................................................................................................... 51
4.2 Configuration in STEP 7 ........................................................................................................ 54
4.3 Communication types ............................................................................................................ 56
4.3.1 Communication types ............................................................................................................ 56
4.3.2 Communication via the SINAUT ST7 protocol....................................................................... 56
4.4 Basic settings ......................................................................................................................... 58
4.4.1 Configuration.......................................................................................................................... 58
4.5 Overview: Connection to LAN / WAN .................................................................................... 59
4.6 Networking a TIM (Ethernet addresses / WAN settings) ....................................................... 61
4.7 WAN settings of the interfaces............................................................................................... 63
4.8 Parameters of WAN networks................................................................................................ 64
4.9 Ethernet interface................................................................................................................... 67
4.9.1 Ethernet interface > address parameters .............................................................................. 67
4.9.2 Advanced options .................................................................................................................. 67
4.9.2.1 MSC protocol settings............................................................................................................ 67
4.9.2.2 TCP connection monitoring.................................................................................................... 71
4.9.2.3 Transmission settings ............................................................................................................ 71
4.9.3 Web server access ................................................................................................................ 72
4.10 Serial interface > Advanced options ...................................................................................... 72
4.10.1 MSC settings.......................................................................................................................... 72
4.10.2 Dedicated line ........................................................................................................................ 72
4.10.3 Dialup network ....................................................................................................................... 75
4.11 Web server............................................................................................................................. 79
4.12 Partner stations...................................................................................................................... 80
4.13 Communication with the CPU ................................................................................................ 81
4.14 Time-of-day synchronization.................................................................................................. 85
4.15 Time stamp ............................................................................................................................ 89
4.16 MSC authentication................................................................................................................ 90
4.17 SMSC..................................................................................................................................... 91
4.18 E-mail configuration ............................................................................................................... 91
4.19 SNMP..................................................................................................................................... 92
4.20 Security and protection .......................................................................................................... 94
4.20.1 Certificate manager................................................................................................................ 94
4.20.2 Handling certificates............................................................................................................... 94
4.20.3 Protection ............................................................................................................................... 96
4.20.4 Configuring access protection................................................................................................ 97
4.21 Creating telecontrol connections for the ST7 communication ............................................... 99
4.22 Data points ........................................................................................................................... 104
4.22.1 Data point configuration ....................................................................................................... 104
4.22.2 "General" tab........................................................................................................................ 111

Table of contents
TIM 1531 IRC
Operating Instructions, 02/2018, C79000-G8976-C468-02 9
4.22.3 Datapoint types .....................................................................................................................111
4.22.4 Process image, type of transmission, event classes ............................................................113
4.22.5 Read cycle ............................................................................................................................115
4.22.6 "Trigger“ tab ..........................................................................................................................116
4.22.7 Threshold value trigger .........................................................................................................118
4.22.8 Analog value preprocessing .................................................................................................119
4.22.9 Command output ..................................................................................................................126
4.22.10 Partner stations.....................................................................................................................127
4.23 Messages..............................................................................................................................127
5 Block library TeleControl ST7.............................................................................................................. 129
5.1 Creating a library...................................................................................................................129
5.2 Structure of the library...........................................................................................................130
5.3 Generating, using and calling the blocks..............................................................................131
5.4 Note on the "BasicTask_*" FCs ............................................................................................133
5.5 Structure of user program for TD7onCPU ............................................................................134
5.5.1 The cyclic SINAUT program .................................................................................................134
5.5.2 Cyclic interrupt OB ................................................................................................................138
5.5.3 Programming error OB..........................................................................................................138
5.6 Types ....................................................................................................................................140
5.6.1 PLC data types (UDT)...........................................................................................................140
5.6.1.1 UDT.......................................................................................................................................140
5.6.2 System data types (SDT)......................................................................................................140
5.6.2.1 SDTs .....................................................................................................................................140
5.7 Master copies........................................................................................................................141
5.7.1 Data point typicals.................................................................................................................141
5.7.1.1 Types and overview of the data point typicals......................................................................141
5.7.1.2 Reoccurring parameters .......................................................................................................144
5.7.1.3 Time stamp ...........................................................................................................................154
5.7.1.4 Analog value typical Ana04R_S............................................................................................155
5.7.1.5 Analog value typical Ana04R_R ...........................................................................................159
5.7.1.6 Analog value typical Ana04W_S...........................................................................................160
5.7.1.7 Analog value typical Ana04W_R...........................................................................................167
5.7.1.8 Binary value typical Bin04B_S ..............................................................................................168
5.7.1.9 Binary value typical Bin04B_R..............................................................................................170
5.7.1.10 Command typical Cmd01B_S...............................................................................................171
5.7.1.11 Command typical Cmd01B_R...............................................................................................173
5.7.1.12 Counted value typicals Cnt01D_S / Cnt04D_S.....................................................................176
5.7.1.13 Counted value typicals Cnt01D_R / Cnt04D_R ....................................................................178
5.7.1.14 Data typical Dat12D_S..........................................................................................................182
5.7.1.15 Data typical Dat12D_R..........................................................................................................186
5.7.1.16 Data typical Dat256D_S........................................................................................................187
5.7.1.17 Data typical Dat256D_R........................................................................................................193
5.7.1.18 Parameter typical Par12D_S ................................................................................................198
5.7.1.19 Parameter typical Par12D_S ................................................................................................208
5.7.1.20 FC Safe.................................................................................................................................214
5.7.1.21 Setpoint typical Set01W_S ...................................................................................................218
5.7.1.22 Setpoint typical Set01W_R ...................................................................................................222
5.7.2 Optional blocks .....................................................................................................................226

Table of contents
TIM 1531 IRC
10 Operating Instructions, 02/2018, C79000-G8976-C468-02
5.7.2.1 ListGenerator1500/300/400 FC ........................................................................................... 226
5.7.2.2 FC PartnerMonitor................................................................................................................ 228
5.7.2.3 FC PartnerStatus ................................................................................................................. 234
5.7.2.4 FC PathStatus...................................................................................................................... 236
5.7.2.5 FC PulseCounter.................................................................................................................. 239
5.7.2.6 FC ST7ObjectTest ............................................................................................................... 241
5.7.2.7 FC TestCopy ........................................................................................................................ 242
5.7.2.8 DB TestCopyData ................................................................................................................ 243
5.7.2.9 Operation of TestCopyMonitor............................................................................................. 246
5.7.2.10 FC TimeTask........................................................................................................................ 249
5.7.2.11 FC Trigger ............................................................................................................................ 250
5.7.3 System blocks...................................................................................................................... 255
5.7.3.1 BasicTask_* FC.................................................................................................................... 255
5.7.3.2 DB BasicData....................................................................................................................... 256
5.7.3.3 FC Create............................................................................................................................. 257
5.7.3.4 Diagnose / Diagnostics FC .................................................................................................. 257
5.7.3.5 FC Distribute ........................................................................................................................ 257
5.7.3.6 FC Search............................................................................................................................ 258
5.7.3.7 FC Startup............................................................................................................................ 258
5.7.4 Communication blocks BCom (CPU1500)........................................................................... 258
5.7.4.1 FB BCom.............................................................................................................................. 258
5.7.4.2 BConnect FB........................................................................................................................ 258
5.7.4.3 DB BConnectData................................................................................................................ 259
5.7.5 Communication blocks BCom (CPU400)............................................................................. 259
5.7.5.1 FB BCom.............................................................................................................................. 259
5.7.5.2 DB BComData...................................................................................................................... 260
5.7.6 Communication blocks PCom (CPU300)............................................................................. 260
5.7.6.1 FB PCom.............................................................................................................................. 260
5.7.6.2 DB PComData...................................................................................................................... 260
5.7.7 Communication blocks XCom (CPU300)............................................................................. 261
5.7.7.1 FB XCom.............................................................................................................................. 261
5.7.7.2 DB XComData...................................................................................................................... 261
6 The Web server (WBM) .......................................................................................................................263
6.1 Supported Web browsers .................................................................................................... 263
6.2 Establishing a connection to the WBM of the TIM ............................................................... 263
6.3 General functions of the WBM ............................................................................................. 264
6.4 Start page............................................................................................................................. 265
6.5 System ................................................................................................................................. 266
6.5.1 Device info ........................................................................................................................... 266
6.5.2 SD card ................................................................................................................................ 267
6.5.3 System time ......................................................................................................................... 267
6.5.4 NTP ...................................................................................................................................... 267
6.5.5 Web server........................................................................................................................... 268
6.5.6 DNS configuration ................................................................................................................ 268
6.6 Maintenance......................................................................................................................... 268
6.6.1 Firmware .............................................................................................................................. 268
6.6.2 Operating status................................................................................................................... 270
6.7 Diagnostics........................................................................................................................... 270

Table of contents
TIM 1531 IRC
Operating Instructions, 02/2018, C79000-G8976-C468-02 11
6.7.1 Diagnostics messages ..........................................................................................................270
6.7.2 Notifications ..........................................................................................................................272
6.8 LAN .......................................................................................................................................272
6.8.1 Ethernet interface [Xn] ..........................................................................................................272
6.9 Telecontrol ............................................................................................................................274
6.9.1 Partner information ...............................................................................................................274
6.9.2 Data points............................................................................................................................279
6.10 Logging .................................................................................................................................279
7 Diagnostics and upkeep ...................................................................................................................... 281
7.1 Diagnostics options...............................................................................................................281
7.2 Online functions ....................................................................................................................283
7.3 Update firmware....................................................................................................................284
7.4 Resetting to factory settings .................................................................................................287
7.5 SNMP....................................................................................................................................288
7.6 Processing status of the messages (SMS / e-mail)..............................................................290
7.7 Module replacement .............................................................................................................292
8 Technical specifications ...................................................................................................................... 293
8.1 Technical specifications........................................................................................................293
8.2 Pinout of the Ethernet interfaces ..........................................................................................295
8.3 Pin assignment of the serial interface...................................................................................296
9 Approvals............................................................................................................................................ 297
A Dimension drawings............................................................................................................................ 301
B Accessories ........................................................................................................................................ 303
B.1 Power supply ........................................................................................................................303
B.2 SD cards ...............................................................................................................................303
B.3 Routers, modems, antennas.................................................................................................305
B.3.1 Dedicated line and dialup network modems.........................................................................305
B.3.2 MODEM MD720....................................................................................................................306
B.3.3 Router SCALANCE M...........................................................................................................307
B.3.4 Mobile wireless antennas .....................................................................................................308
B.4 Cables, connecting cables....................................................................................................310
B.4.1 Connecting cables for connecting modems..........................................................................310
B.4.2 Cable for RS-485 connection................................................................................................312
C STEP 7 V5 configuration of the proxy.................................................................................................. 313
C.1 Configuration in STEP 7 V5..................................................................................................313
C.2 Proxies in HW Config............................................................................................................314
C.3 Special features of the PROXY TIM 1531 IRC.....................................................................315
C.4 SINAUT configuration ...........................................................................................................315

Table of contents
TIM 1531 IRC
12 Operating Instructions, 02/2018, C79000-G8976-C468-02
C.5 Exporting configuration data ................................................................................................ 316
D Documentation references ...................................................................................................................319
Glossary ..............................................................................................................................................323
Index ...................................................................................................................................................337

TIM 1531 IRC
Operating Instructions, 02/2018, C79000-G8976-C468-02 13
Application and functions
1
1.1
Properties of the TIM
Application
The TIM 1531 IRC is a telecontrol communications module for the following SIMATIC
automation systems:
●S7-300
●S7-400
●S7-1500
The TIM serves as the connection of the SIMATIC stations via public or private
infrastructures to a telecontrol master station. Precisely one local CPU is assigned to the
TIM.
As a standalone device it is not dependent on the S7 device family or rack type of the
assigned CPU.
For the telecontrol communication the TIM uses the "SINAUT ST7“ protocol.
Due to the capability of the TIM to establish redundant transmission paths between stations
and to the master station and the option of storing process values the communication has a
high degree of reliability.
Master station types
As the connection partner of the TIM in a telecontrol master station, the following computer
assisted applications are supported:
●SINAUT ST7cc
●SINAUT ST7sc
●SIMATIC WinCC OA
If no master station PC is used, the TIM can be used as a master station. For visualization,
for example, an HMI panel can be used via the CPU.

Application and functions
1.2 Communications services
TIM 1531 IRC
14 Operating Instructions, 02/2018, C79000-G8976-C468-02
Interfaces of the TIM
The TIM is equipped with the following interfaces:
●
3 x Ethernet interface RJ-45
Connection to three different subnets
Telecontrol communication via IP-based WAN/LAN networks
●
1 x serial interface
Default can be switched over by configuration: RS-232 ⇔ RS-485
Telecontrol communication via the following WAN networks:
–Classic WAN networks: Dedicated line, dialup network
–IP-based networks (can be switched over by the configuration)
You will find the supported transmission protocols and network types in the section
Communications services (Page 14).
Network node types
With its four interfaces, the TIM can used at the following positions of a WAN network:
●Master station
●Node station
●Station
Expansion of existing SINAUT systems
In existing SINAUT systems with SIMATIC S7-300/400 stations and TIM modules for the
telecontrol functions, the TIM 1531 IRC can be used universally for expansions.
1.2
Communications services
The following communications services are supported:
Telecontrol communication
Network types
The TIM makes telecontrol communication possible via the following network types:
●Industrial Ethernet
●Dedicated line / wireless network
●Analog dial-up network, ISDN network

Application and functions
1.2 Communications services
TIM 1531 IRC
Operating Instructions, 02/2018, C79000-G8976-C468-02 15
●Mobile wireless networks
–GSM / GPRS (2G) with MODEM MD720
–UMTS (3G) / HSPA+ with SCALANCE M router
–LTE (4G) with SCALANCE M router
●IP-based wireless networks
You will find an overview of the transmission paths and network types in the section
Overview: Connection to LAN / WAN (Page 59).
The "SINAUT ST7" protocol
For telecontrol communication via telecontrol networks the TIM uses the ST7 protocol on the
application layer (OSI layer 7).
The protocol supports the following functions and services
●
Communication with the control center
The TIM communicates via LAN or WAN with an application in the master station.
You will find the supported master station types in the section Properties of the TIM
(Page 13).
●
Direct communication
In dial-up networks, mobile wireless networks and Ethernet networks, there is direct
communication between the subscribers.
●
Inter-station communication
In dedicated line networks and with communication via the Internet with a mobile wireless
network (GSM/MSC), the TIM supports inter-station communication between S7 stations
via the master station.
With inter-station communication, the TIM establishes a connection to the master station.
The master station forwards the messages to the destination station.
●
Messages: SMS / e-mail
When configurable events occur, the TIM can send SMS messages to mobile telephones
and e-mails to PCs with an Internet connection.
–SMS messages can be sent if the TIM is connected to a mobile wireless network via
the serial interface and a GSM or GPRS module (MODEM MD720).
–If the TIM is connected, e-mails can be sent via the Ethernet interface.
You configure the e-mail protocol to be used and the server access in STEP 7 in the
parameter group "E-mail configuration".
You configure the messages in the message editor, see section Messages (Page 127).
The use of program blocks is not necessary for this.
You will find information about addressing in ST7 and configuring in the section
Communication types (Page 56).

Application and functions
1.2 Communications services
TIM 1531 IRC
16 Operating Instructions, 02/2018, C79000-G8976-C468-02
Protocols with security functions
●
MSC
For secure telecontrol communication the transmission protocol "MSC" (OSI layer 3) is
available. MSC can be used for communication between two TIM modules (not between
the TIM and a master station application).
MSC is IP-based and can be used in the following networks:
–Ethernet
–Internet (DSL)
–Mobile wireless network (GSM) and Internet
The following variants of the protocol are available:
–MSC
Simple Internet communication via the Internet (DSL)
–MSCsec
Secure Internet communication when security requirements are higher.
●
IPsec / VPN (via router SCALANCE M)
VPN stands fro highly secure communication via mobile wireless and the Internet (DSL)
using a SCALANCE M mobile wireless router.
For a description of the protocols, refer to the section Security functions (Page 18).
S7 communication
For reading / writing data from and to the local CPU via S7 connections, the following
services are supported.
●
PG communication
Communication with an engineering station
●
PG routing
S7 communication across subnetwork boundaries
●
PUT/GET
To exchange data with a local S7-300/400 CPU the TIM supports communication using
the the program blocks PUT/GET as client and server.
●
READ/WRITE
To exchange data with a local S7-1500 CPU the TIM supports communication using the
the program blocks READ/WRITE as client and server.
The Ethernet interfaces of the TIM must be configured with the network type "Neutral" for the
S7 communications services.
You will find information on the communications functions and the program blocks in the
STEP 7 information system.

Application and functions
1.3 PG routing
TIM 1531 IRC
Operating Instructions, 02/2018, C79000-G8976-C468-02 17
Web server connections (WBM)
●
HTTP/HTTPS
The TIM has an integrated Web server with which you can connect from a PC via
HTTP/HTTPS. Connections are possible via LAN or WAN
The Web pages display diagnostics information and configuration data.
You will find information on the content and operation in the section The Web server
(WBM) (Page 263).
1.3
PG routing
PG routing between telecontrol modules
PG routing is supported between the modules listed in the table and via the specified media.
A requirement for the CPs is that the options "S7 communication" and "Online functions" are
enabled in the "Communication types" parameter group.
Module
Medium (protocol)
TIM 1531 IRC
TIM 4R-IE
TIM 3V-IE / TIM
3V-IE Advanced
CP 1243-8 IRC
CP 1542SP-1 IRC
TIM 1531 IRC
Ethernet (S7)
Ethernet (MSC)
RS-232
Ethernet (S7)
Ethernet (MSC)
-
Ethernet (S7)
Ethernet (MSC)
-
Ethernet (S7) Ethernet (S7)
TIM 4R-IE
Ethernet (S7)
Ethernet (MSC)
-
Ethernet (S7)
Ethernet (MSC)
RS-232
Ethernet (S7)
Ethernet (MSC)
RS-232
-
-
TIM 3V-IE
Ethernet (S7)
Ethernet (MSC)
-
Ethernet (S7)
Ethernet (MSC)
RS-232
Ethernet (S7)
Ethernet (MSC)
RS-232
-
-
CP 1243-8 IRC
Ethernet (S7)
-
-
-
-
CP 1542SP-1 IRC
Ethernet (S7)
-
-
-
-
"RS-232" means communication via dedicated line or dialup network.
See the performance data and the configuration limits for the number of supported
connections.

Application and functions
1.4 Security functions
TIM 1531 IRC
18 Operating Instructions, 02/2018, C79000-G8976-C468-02
1.4
Security functions
Security functions of the transmission protocols
The transmission protocols that can be used for telecontrol communication support the
following security functions:
●
MSC
The MSC protocol supports authentication of the communications partners and simple
encryption of data. A user name and a password are included in the encryption. An MSC
tunnel is established between the MSC station and MSC master station.
●
MSCsec
MSCsec supports authentication of the communications partners and data encryption
with a user name and password.
In addition to this, the shared automatically generated key is renewed between the
communications partners at a configurable Key exchange interval.
Further security functions of the TIM
The TIM also supports the following security functions:
●
NTP (secure)
For secure transfer during time-of-day synchronization
●
STARTTLS / SSL/TLS
For the secure transfer of e-mails
●
HTTPS
For secure access to the Web server of the TIM
●
SNMPv3
For secure transmission of network analysis information safe from eavesdropping
Note
Plants with security requirements - recommendation
Use the following options:
•
If you have systems with high security requirements, use the secure protocols for
example HTTPS or SNMPv3.
•
If you connect to public networks, you should use security modules with a firewall, see
below.
Refer to the information in the section
Security recommendations (Page 51).

Application and functions
1.4 Security functions
TIM 1531 IRC
Operating Instructions, 02/2018, C79000-G8976-C468-02 19
Additional protection be using security modules
With Industrial Ethernet Security, individual devices, automation cells or network segments
of an Ethernet network can be protected. The following security modules are suitable for
connecting the TIM to public networks:
●SCALANCE M800
Routers for IP-based data transfer via DSL or mobile networks of the standards GPRS,
EGPRS, UMTS, LTE
●SCALANCE S
Security modules for connection to Ethernet networks
The data transfer of the TIM along with a security module can be protected from the
following attacks by a combination of different security measures:
●Data espionage
●Data manipulation
●Unwanted access
Secure underlying networks can be operated via additional Ethernet interfaces of the TIM or
CPU.
Using the security modules mentioned above SCALANCE M / SCALANCE S the following
additional security functions can be used:
●
Firewall
–IP firewall with stateful packet inspection (layer 3 and 4)
–Firewall also for "non-IP" Ethernet frames according to IEEE 802.3 (layer 2)
–Limitation of the transmission speed to restrict flooding and DoS attacks ("Define IP
packet filter rules")
–Global firewall rule sets
●
Protection for devices and network segments
The protection provided by the firewall can cover individual devices, several devices or
even entire network segments.
●
Communication made secure by IPsec tunnels (VPN)
VPN tunnel communication allows the establishment of secure IPsec tunnels for
communication with one or more security modules.
VPN can be used for communication via mobile wireless and the Internet (DSL) along
with a SCALANCE M router. The SCALANCE M800 product line includes various VPN
routers with encryption software and a firewall.
The router can be put together with other modules to form VPN groups during
configuration. IPsec tunnels (VPN) are created between all security modules of a VPN
group. All internal nodes of these security modules can communicate securely with each
other through these tunnels.
●
Logging
To allow monitoring, events can be stored in log files that can be read out using the
configuration tool or can be sent automatically to a Syslog server.

Application and functions
1.5 Other services and properties
TIM 1531 IRC
20 Operating Instructions, 02/2018, C79000-G8976-C468-02
You will find further information on the functionality and configuration of the security functions
in the information system of STEP 7 and in the manual /9/ (Page 321).
1.5
Other services and properties
Other services and properties
●
Data point configuration
Due to the data point configuration in STEP 7, programming program blocks in order to
transfer the process data is unnecessary. The process data is configured as individual
data points and transferred one-to-one to the communications partner.
●
Saving messages
Data messages that cannot be transferred to the communications partner due to
connection disruptions are saved.
–In the message memory up to 100000 messages can be buffered.
–If an SD card is used, messages can also be saved on the SD card.
●
IP configuration
The TIM supports IP addresses according to IPv4.
Address assignment:
–The IP address, the subnet mask and the address of a gateway can be set manually
in the configuration.
–As an alternative, the IP address can be obtained from a DHCP server or by other
means outside the configuration.
●
Time-of-day synchronization
On every interface the TIM provides the option of receiving and forwarding the time of
day.
Synchronization method NTP (Network Time Protocol) via Industrial Ethernet:
–NTP
–NTP (secure)
You can find information in the section Time-of-day synchronization (Page 85).
For information on the format of the time stamp of the messages, refer to the section
Time stamp (Page 89).
●
Access to the Web server of the TIM
With the aid of the Web server, you can display module and diagnostics data.
●
Storage and event-driven transfer of process data
The TIM can store events of different classes and transfer the corresponding process
values individually or bundled together to the communications partner. The transfer can
be triggered by various triggers.