Siemens NK8237 MP4.81-01 User manual

A6V10854379_a_en
Building Technologies
30.11.2017
CPS Fire Safety
NK8237 MP4.81-01
NK8237 IEC 60870-5-104 Gateway
For Sinteso™ and Cerberus® PRO
Fire Detection Systems
Installation
Configuration
Commissioning

3
Building Technologies
A6V10854379_a_en
CPS Fire Safety
30.11.2017
Table of contents
About this document.........................................................................................................7
1Security disclaimer ..........................................................................................10
2Safety regulations............................................................................................11
2.1 Country-specific standards.................................................................................11
2.2 Assembly and installation...................................................................................11
2.3 Commissioning and testing................................................................................11
2.4 Disposal and recycling .......................................................................................12
2.5 Modifications to the system design and the products........................................12
2.6 Data privacy and protection ...............................................................................12
3Introduction ......................................................................................................13
3.1 Connectivity examples .......................................................................................13
3.2 What's new.........................................................................................................13
3.3 System dimensions and compatibility list...........................................................13
4System limits ....................................................................................................14
5NK8000 Security...............................................................................................16
6Structure and functions...................................................................................17
6.1 NK8237 hardware ..............................................................................................17
6.1.1 Front panel..........................................................................................17
6.1.2 Internal DIP switches..........................................................................18
6.1.3 Internal jumpers..................................................................................19
6.1.4 Serial interfaces..................................................................................20
6.1.5 Onboard I/O........................................................................................20
6.1.6 I2C interface: DF8090 power supply supervision...............................21
6.1.7 Ethernet interfaces..............................................................................22
6.1.8 USB interface......................................................................................23
6.1.9 SD card...............................................................................................23
7Hardware installation.......................................................................................24
7.1 NK8237 hardware installation............................................................................24
7.2 NE8001 housing solution for NK823x................................................................29
7.2.1 NE8001 hardware requirements.........................................................29
7.2.2 NE8001 hardware installation.............................................................29
8Software installation........................................................................................32
8.1 Installation checklist ...........................................................................................32
8.2 Composer tool....................................................................................................32
8.3 Installation of Add-on distribution package ........................................................33
8.3.1 Installing the Add-on module..............................................................33
8.3.2 Removing the Add-on module............................................................34
8.4 Launching Composer.........................................................................................35
8.5 NK823x Web Server...........................................................................................36
8.6 NW8202 IP configuration download tool............................................................38
8.6.1 NW8202 hardware requirements........................................................38
8.6.2 NW8202 software requirements.........................................................38

4
Building Technologies
A6V10854379_a_en
CPS Fire Safety
30.11.2017
8.6.3 NW8202 installation............................................................................38
8.7 NW8204 diagnostic tool .....................................................................................39
8.7.1 NW8204 hardware requirements........................................................39
8.7.2 NW8204 software requirements .........................................................39
8.7.3 NW8204 installation............................................................................39
8.8 Secure communication for web services............................................................40
9Configuration....................................................................................................41
9.1 Configuration checklist .......................................................................................41
9.2 Configuring IP settings via the NK823x Web Server..........................................42
9.3 Configuring IP settings via NW8202...................................................................43
9.4 Creating a new NK8237 IEC GW Composer project .........................................45
9.5 Creating the IEC system(s)................................................................................47
9.5.1 IEC system creation procedure...........................................................47
9.6 Creating the NK8237 Gateway...........................................................................48
9.6.1 NK8237 creation procedure................................................................48
9.6.2 TCP/IP IEC configuration procedure...................................................48
9.7 Configuring the Fire network..............................................................................53
9.7.1 FS20 fire system.................................................................................53
9.7.2 NK823x BACnet Protocol....................................................................56
9.7.3 FS20 BACnet connection to NK823x..................................................58
9.8 Customising the IEC Interface............................................................................59
9.8.1 General gateway parameters..............................................................59
9.8.2 General parameters configuration procedures...................................60
9.8.3 IEC addresses.....................................................................................61
9.8.4 IEC address configuration procedures................................................61
9.8.5 Export and re-import of the IEC address map....................................62
9.9 Configuring the relay output...............................................................................62
9.10 Downloading the NK8237...................................................................................63
9.10.1 Verifying the connection to the NK8237 unit.......................................64
9.10.2 NK8237 configuration download.........................................................64
9.10.3 NK8237 firmware download procedure...............................................64
10 System test .......................................................................................................68
11 Maintenance and diagnostics.........................................................................69
11.1 Kernel update.....................................................................................................69
11.3The NW8204 diagnostic tool..............................................................................70
11.3.1 Launching NW8204 from DMS host ...................................................70
11.3.2 File commands....................................................................................73
11.3.3 Diagnostic functions............................................................................73
11.3.4 Uploading diagnostic files...................................................................76
11.3.5 Using log files......................................................................................78
11.4 The NK823x Web Server ...................................................................................81
11.5 Correcting communication failures.....................................................................82
11.5.1 IEC communication problems.............................................................82
11.5.2 Fire systems communication problems...............................................83
11.5.3 Control unit generated a fault..............................................................83
11.5.4 Control unit does not respond.............................................................84

5
Building Technologies
A6V10854379_a_en
CPS Fire Safety
30.11.2017
11.5.5 No fault generated by network failure - MP3.15 and higher...............84
12 Secure operation requirements......................................................................85

About this document
7
Building Technologies
A6V10854379_a_en
CPS Fire Safety
30.11.2017
About this document
Purpose
This document is a guide to the installation, configuration and commissioning of the
NK8237 IEC gateway add-on for FS20 and FS720 fire detection systems. It
includes an overview of the system, hardware requirements and limitations, and
detailed installation and configuration instructions.
This guide is to be used in conjunction with the Composer Technical Manual
(document no. A6V10062401). For implementing the IEC interface, you will also
need to refer to the NK8237 IEC 60870-5-104 Interface Specifications (document
no. A6V10741020).
Scope
This document applies to the NK8237 MP4.81-01.
Target audience
This documentation is intended for the following users:
Project Managers
Project Engineers
Commissioning Personnel
It is assumed that individuals performing the operations described in this manual
have prior expertise and training in the field of safety and security, at least a
moderate level of familiarity with the Siemens Building Technologies product line,
and experience with the installation, configuration, and commissioning of security
management systems.
Documentation resource information
The DMS8000 Documentation Resource Information and Glossary Guide
assembles important information regarding documentation resources. This
document contains the following:
Comprehensive definitions of the target audiences for Siemens FS DMS
documents
Training program information including the Siemens intranet link
A complete list of all available DMS8000 documents
Instructions for how to obtain a document via the Siemens intranet using the
Siemens Asset Portal
A map of relevant documents for each target audience group
Customer Support links & resources
A glossary containing definitions of all terms and acronyms used in DMS8000
documentation
To access the DMS8000 Documentation Resource Information and Glossary
Guide (document no. A6V10089056), go to the link and follow the document
search instructions below:
https://step.bt.siemens.com/portal/StandardAssetPortal#contextID=Headquarters&
workspaceID=Approved&screen=homepage
1. In the Simple Search column on the left, set:
–Search Text: Enter the document number to search for (for example
A6V10089056 ) or type part of the document name.
–Asset Type: All
2. Click Search to start.

About this document
8
Building Technologies
A6V10854379_a_en
CPS Fire Safety
30.11.2017
3. In the resulting area on the right, click on Contents link to show the list of
search results.
4. In the list, select one or more documents and click the Download Assets icon.
5. After the download preparation completes (Background Process …), click
Download and follow the instructions of your browser.
For more information such as Siemens news and announcements, visit the STEP
Web portal at:
https://workspace.sbt.siemens.com/content/00001123/default.aspx
Note: Before beginning work on the system you must have read and understood
the Safety Regulations section in this manual.
Liability disclaimer for damage or injuries
Before products are delivered, they are tested to ensure they function correctly
when used properly. Siemens disclaims all liability for damage or injuries caused
by the incorrect application of the instructions, or the disregard of danger
advisories. This disclaimer applies in particular to personal injuries or damage
caused by:
Improper and/or incorrect use.
Disregard of safety instructions in the documentation or on the product.
Poor maintenance or a lack of maintenance.
We have checked the contents of this manual for agreement with the hardware and
software described. Since deviations cannot be precluded entirely, we cannot
guarantee full agreement. However, the data in this manual are reviewed regularly
and any necessary corrections are included in subsequent editions. Suggestions
for improvement are welcome.
Copyrights and registered trademarks
Brand or product names mentioned in this document may be names protected by
copyright law or registered trademarks of other companies. These are mentioned
only for identification purposes and have no recommendatory character in regard to
the product or manufacturer, unless otherwise stated.
Documentation Conventions
The following table lists conventions to help you use this document in a quick and
efficient manner.
Convention
Examples
Numbered Lists (1, 2, 3…) indicate a
procedure with sequential steps.
1. Turn OFF power to the field panel.
2. Disconnect the power cord.
3. Open the cabinet.
One-step procedures are indicated by a
bullet point.
Expand the Event List.
Conditions that you must complete or must
be met before beginning a procedure are
designated with a ⊳.
Results, after completing a step or at the
end of the entire procedure, are designated
with a ⇨.
⊳ The report you want to print is open.
1. Click the Print icon .
⇨ The Print dialog box appears.
2. Select the printer and click Print.
⇨ The print confirmation appears.
Bold font in a procedure indicates something
Type Ffor Field panels.

About this document
9
Building Technologies
A6V10854379_a_en
CPS Fire Safety
30.11.2017
you should select or type.
Click OK to save changes and close the
dialog box.
Menu paths are indicated in bold.
Select File > Text, Copy > Group, which
means from the File menu, then select Text,
Copy and finally Group.
Error and system messages are displayed in
Courier New font.
The message Definition
successfully renamed displays in the
status bar.
Italics are used to emphasize a term.
The Open Processor continuously executes
a user-defined set of instructions called the
control program .
This symbol signifies a Note. Notes provide
additional information or helpful hints.
Caution
This is a Caution message and indicates
that minor or moderate injury or property
damage may occur if a procedure is not
followed.
Warning
This is a Warning message and indicates
that a serious injury or a severe equipment
and property damage may occur if a
procedure is not followed.
Cross references to other information in
printed material are indicated with an arrow
and the page number, enclosed in brackets:
[→92]
For more information on creating flowcharts,
see Flowcharts [→92].
Modification index
Note: For versions more than four years old, please visit the Siemens Asset Portal.
Version
Date
Notes
A6V10854379_a_en
30.11.2017
NK8237 MP4.81-01.
For details regarding updates/modifications, see
What's new [→13]
A6V10854379_a_en
30.09.2016
NK8237 MP4.81.
A6V10854379_a_en
02.2016
NK8237 MP4.80.
First edition.

About this document
10
Building Technologies
A6V10854379_a_en
CPS Fire Safety
30.11.2017
1Security disclaimer
Products, solutions and services from Siemens include security functions to ensure
the secure operation of building automation and control, fire safety, security
management, and physical security systems. The security functions on these
products, solutions and services are important components of a comprehensive
security concept.
Drafting, implementing and managing a comprehensive and up-to-date security
concept, customized to individual needs, is nevertheless necessary, and may result
in additional plant- or site-specific preventive measures to ensure secure operation
of your site regarding building automation and control, fire safety, security
management, and physical security. These measures may include, for example,
separating networks, physically protecting system components, user training, multi-
level defensive measures, etc. For additional information on security as part of
building technology and our product, solution and service offerings, please contact
your Siemens sales representative or project department. We strongly recommend
to always comply with our security advisories on the latest security threats, patches
and other related measures.
http://www.siemens.com/cert/en/cert-security-advisories.htm

Safety regulations
1
Country-specific standards
11
Building Technologies
A6V10854379_a_en
CPS Fire Safety
30.11.2017
2Safety regulations
This section describes the danger levels and the relevant safety regulations
applicable to the use of the products described in this manual. Please read the
following work instructions as well as the preceding section About this document
thoroughly before beginning any work.
Danger potential to individuals
NK8237 units are powered with low voltage DC. While there are no specific safety
regulations that apply to these devices, modifications made to safety/security
systems in general may present a risk to the safety of the individual performing
those modifications, as well as to the equipment itself.
If used, the NE8001 cabinet is powered with AC voltage and the required power
cable should be installed following scrupulously the instructions given in this
manual.
2.1 Country-specific standards
Siemens Building Technologies products are developed and produced in
compliance with the relevant international and European safety standards. This
document provides warnings and recommendations specific to NK8000 products.
Any additional country-specific or local safety standards and/or regulations that
apply concerning project planning, installation, operation, and device disposal must
also be taken into account.
Note: As for any electrical equipment, proper grounding is critical to the safe
operation as it provides a protection against electrical shocks. Before starting any
activity, be sure that the electrical installation complies with relevant regulations
and conforms to local safety standards.
2.2 Assembly and installation
The NK8237 units and NE8001 cabinets should always be installed in a clean and
stable environment; see the specific requirements given in the Technical Data
section of the specific datasheets.
In particular, keep units and cabinets away from the following:
High levels of dust
High temperature and humidity
Locations where it might became wet
Vibration and impact
Also, abide by the safety regulations of the connected devices.
2.3 Commissioning and testing
Activate security-, fire- and third party systems or devices only in the presence
of the person responsible.
Inform people before the testing of alarm devices —consider the possibility of
panic reactions.
Inform the alarm and fault receiving stations connected to the system before
carrying out tests.

1
Safety regulations
Disposal and recycling
12
Building Technologies
A6V10854379_a_en
CPS Fire Safety
30.11.2017
2.4 Disposal and recycling
These devices include electrical and electronic components and must
not be disposed of as domestic waste.
Current local legislation must be observed.
The NK8237 units have been manufactured as much as possible from materials
that can be recycled or disposed of in a manner that is not environmentally
damaging. However, they contain parts (batteries) that require disposal in a
controlled waste stream according to local environmental standards and/or
regulations.
2.5 Modifications to the system design and the
products
Note: Modifications to a system or to individual products may cause faults or
malfunctioning.
Please request written approval from Siemens Building Technologies and from any
relevant authorities concerning intended system modifications and system
extensions.
2.6 Data privacy and protection
Make sure that the configuration of the system complies with local data privacy and
protection regulations.

Introduction
2
Connectivity examples
13
Building Technologies
A6V10854379_a_en
CPS Fire Safety
30.11.2017
3Introduction
The NK8000 family provides LAN/WAN adapter products for a safety and security
network:
NK822x series (no longer available, end of service: 31 December 2015)
NK823x Ethernet Ports series (NK8231, NK8232, NK8235)
NK8237 Modbus Gateway
NK8237 IEC 60870-5-104 Gateway
The NK8237 IEC 60870-5-104 Gateway for Sinteso FS20 and Cerberus PRO
FS720 fire detection systems provides a connection (TCP/IP or Serial RTU) to a
third-party IEC Host station for supervision and control of fire systems.
3.1 Connectivity examples
third-party IEC Host
e.g., SCADA system
Management
level
Automation
level
Field level
FC2020 NK8237 IEC 60870-5-104 Gateway
BACnet/Ethernet
BACnet server
GAP BACnet client IEC Slave
ETH1 ETH2
IEC Master IEC 60870-5-104 Ethernet
IEC 60780-5-104 TCP/IP connectivity
3.2 What's new
Here is the list of modifications for new functions and software improvements.
NK8000 MP4.81-01
Section
Modifications
11.2 SNMP Monitoring
- Removed SNMP support
NK8000 MP4.81
Section
Modifications
9.6.1NK8237 creation procedure [→48]
- New NTP-based type synchronization
11.1Kernel update [→69]
- Enhanced information in the Kernel Update
3.3 System dimensions and compatibility list
Please refer to NK8237 Datasheet (A6V10316240). Also, the latest information and
compatibility issues about the current software can be found in the NK8000
Release Notes (A6V10062453).

3
System limits
14
Building Technologies
A6V10854379_a_en
CPS Fire Safety
30.11.2017
4System limits
The following describes the system limits for the NK8237 units.
Fire control units
The following control units are supported:
FC2020
FC2030
FC2040
FC2060
FC2080
FT2040
FT2080
FC722
FC724
FC726
FT744
For detailed information about supported subsystem software versions, see the
NK8000 Release Notes (document n.A6V10062453.)
Fire system topologies and connectivity limits
Up to 16 FC20xx/FC72x control units.
Detectors
Max 10,000. This includes all the physical elements of the FC20/FC720 control
units.
IEC Master device/station
Up to four IEC 60870-5-104 Host protocols can be handled, via TCP/IP connection:
TCP/IP connection: IEC server for four TCP/IP client connections. Separate
Ethernet ports can be used for BACnet/IP and IEC TCP/IP for maximum
protection of the safety network.
Each IEC 60870-5-104 Host must be connected to the same network. Each host IP
Address must be configured in the IEC Server parameters.
Only one connection is permitted from the same IP address Host.
Note: Due to the limits of two BACnet clients per FS20/FS720 site, there is a limit
of two NK8237 clients per site. For larger FS20/FS720 sites you may need to split
the site into smaller sites.

System limits
3
15
Building Technologies
A6V10854379_a_en
CPS Fire Safety
30.11.2017
IEC 60870-5-104 hosts and system limits per each connected NK8237 unit
IEC hosts
Detectors and units per NK8237
1-4 IEC hosts
Max. 10,000 detectors.
16 FS20/FS720 units
Interaction capabilities
Unlike the other NK8000 units, the NK8237 does not support interactions.
I/O modules locally connected via I2C
Unlike the other NK8000 units, the NK8237 does not support DF8000 I/O modules.

4
Structure and functions
System dimensions and compatibility list
16
Building Technologies
A6V10854379_a_en
CPS Fire Safety
30.11.2017
5NK8000 Security
To ensure the system security and prevent physical damages and attacks that may
compromise the system integrity and confidentiality, make sure to install NK823x
units according to the following criteria:
NK823x units must be updated to latest Kernel and firmware versions.
NK823x units must be must be installed in locked cabinets (for example, a
control panel housing or the dedicated NE8001 cabinet).
Cabinets must be installed in locked rooms with constant surveillance and
restricted access to authorized personnel only.
Most of the communication protocols used between the NK823x units and the
management station, and between the NK823x units and the subsystems, are
open and unprotected protocols (e.g. BACnet, Modbus TCP, IEC 60870-5-104
etc.). Therefore, the networks where NK823x units are connected to must be
protected from unauthorized data access, use, disclosure, disruption,
modification, and destruction. This concerns all networks that are somehow
vulnerable due to external connections (WAN, Internet), open technologies
(wireless networks), or any other risk of fraudulent access.
To achieve the required level of security, the protective measures must include:
–The use of firewalls on the Intranet to filter external traffic and select the
allowed ports.
NOTE: The list of ports used by the management system can be found in
the Application & Planning document (A6V10063710).
–The use of Virtual Private Networks (VPN) or other equivalent solutions to
establish a secure (encrypted) tunnel between the NK823x LAN and the
management station across public or unprotected networks.
In the NK8237 unit download, the secure (default) option must be selected. Do
not use the FTP modes. For more information, refer to section Configuring IP
settings via NW8202 [➙ 43]).
The built-in NK823x firewall and routing capabilities only provide a basic level
of protection for gateway purposes. For this reason, the use of NK823x as
firewall for protecting subsystems, management stations, and customer
networks is not recommended. In installations with a critical infrastructure and
higher security requirements, the use of up-to-date, professional and properly
configured firewalls is highly recommended.

Structure and functions
4
NK8237 hardware
17
Building Technologies
A6V10854379_a_en
CPS Fire Safety
30.11.2017
6Structure and functions
6.1 NK8237 hardware
The NK8237 is composed of an electronic board installed in a compact and robust
plastic box.
Note: NK8237 units with build state up to 01 are equipped with the NKM8001-A1
mainboard and NK8237 units with build state 10 or higher are equipped with the
NKM8001-A2 mainboard.
NK8237 gateway unit
6.1.1 Front panel
The front panel houses 9 LEDs.
Left Side LEDs
The five LEDs on the left side are from top to bottom:
Power (green LED)
Power (hardware –controlled).
Vital functions (green LED)
Software vitality:
 Blinking (1 flash) : core software running.
 Blinking (2 flashes) : core software running and logging function active.
Tamper (bi-color LED)
Unit tamper:
 Red means tamper alarm (hardware controlled).
 Green means tamper disabled (from management station).
Download (red LED)
Network diagnostics:
 Off : status OK.
 Blinking (1 flash) : missing identification from NS8xxx.
 Blinking (2 flashes) : not used.
 Blinking (3 flashes) : FTP channel open (default mode; for switch settings see
Internal DIP Switches .
 On : critical/hardware fault.

4
Structure and functions
NK8237 hardware
18
Building Technologies
A6V10854379_a_en
CPS Fire Safety
30.11.2017
Diagnostics (yellow LED)
Internal interface diagnostics:
 Off : status OK.
 Blinking (fast) : booting operating system after restart.
 Blinking (1 flash) : missing or insufficient license.
 Blinking (2 flashes) : trouble with the I2C bus to I/O modules.
 Blinking (3 flashes) : not used
 Blinking (4 flashes) : trouble with the serial/network interface.
 Blinking (5 flashes) : trouble with DLL or RCLOCK file(s).
 Blinking (6 flashes) : IEC GW trouble.
–SW trouble.
–No communication to FS20/FS720 or to the IEC Master.
 On : critical/hardware fault.
Right Side LEDs
The four LEDs on the right side are, from top to bottom:
Name
Function
Com1
Status Com1
Red: RX
Green: TX
Com2
Status Com2
Com3 (not used)
Status Com3
Com4 (not used)
Status Com4
6.1.2 Internal DIP switches
The internal DIP switches (S101) enable a download session via FTP using a
default IP address and the NK823x Web Server.
Internal switch
Functions
DIP switch 1
Default mode/network access: If DIP switch 1 is ON, a Secure Download
connection occurs by default on the Ethernet 1 at the default IP address
192.168.9.41 and the NK823x Web Server is enabled.
DIP switch 2
Default mode/network access: If DIP switch 2 is ON, a Secure Download
connection occurs by default on the Ethernet 2 at the default IP address
192.168.10.41 and the NK823x Web Server is enabled.
DIP switch 1 and 2
Default mode/network access: If DIP switch 1 and 2 are ON, the passwords
of the NK823x Web Server are set back to the default values.

Structure and functions
4
NK8237 hardware
19
Building Technologies
A6V10854379_a_en
CPS Fire Safety
30.11.2017
6.1.3 Internal jumpers
1 2 3
X1 X2 X3 X101 X102 X103 X104 X105
X111
4
Internal DIP switch and jumpers (NKM8001-A1 mainboard)
Item
Name
Description
1
S101
DIP-Switches
2
S1
Reset button
3
S2
Tamper switch
4
X115
When closed, it disables the box tamper alarm.

4
Structure and functions
NK8237 hardware
20
Building Technologies
A6V10854379_a_en
CPS Fire Safety
30.11.2017
1 2 3
X1 X2 X3 X101 X102 X103 X104 X105
X111
4
Internal DIP switch and jumpers (NKM8001-A2 mainboard)
Item
Name
Description
1
S101
DIP-Switches
2
S1
Reset button
3
S2
Tamper switch
4
X115
When closed, it disables the box tamper alarm.
6.1.4 Serial interfaces
The NK8237.2 model is equipped with two serial lines available on the main board.
The serial port can be configured as an RS232 interface using connector COM1
and COM2, or as an RS485 interface using connectors X104 and X105.
All lines are fully RS232 compliant and have EMC/ESD protection.
No galvanic isolation is provided; all serial lines have a common ground.
6.1.5 Onboard I/O
The NK823x main board is equipped with three digital inputs (X102) and one relay
output (X101).
The relay output can be used for reporting a faulty communication detected by a
watchdog timeout expiration (see General gateway parameters [➙59]).