Siemens SIMATIC ET 200SP User manual

CP 154xSP-1
SIMATIC NET
ET 200SP - Industrial Ethernet
CP 154xSP-1
Operating Instructions
CP 1542SP-1
CP 1542SP
-1 IRC
CP 1543SP
-1
12/2019
C79000
-G8976-C426-05
Preface
Application and functions
1
LEDs and connectors
2
Installation, wiring,
commissioning
3
Configuration
4
Program blocks
5
Diagnostics and
maintenance
6
Technical specifications
7
Approvals
A
Dimension drawings
B
Accessories
C
Documentation references
D

Siemens AG
Digital Industries
Postfach 48 48
90026 NÜRNBERG
GERMANY
C79000-G8976-C426-05
Ⓟ
01/2020 Subject to change
Copyright © Siemens AG 2016 - 2019.
All rights reserved
Legal information
Warning notice system
This manual contains notices you have to observe in order to ensure your personal safety, as well as to prevent
damage to property. The notices referring to your personal safety are highlighted in the manual by a safety alert
symbol, notices referring only to property damage have no safety alert symbol. These notices shown below are
graded according to the degree of danger.
DANGER
indicates that death or severe personal injury will result if proper precautions are not taken.
WARNING
indicates that death or severe personal injury may result if proper precautions are not taken.
CAUTION
indicates that minor personal injury can result if proper precautions are not taken.
NOTICE
indicates that property damage can result if proper precautions are not taken.
If more than one degree of danger is present, the warning notice representing the highest degree of danger will
be used. A notice warning of injury to persons with a safety alert symbol may also include a warning relating to
property damage.
Qualified Personnel
The product/system described in this documentation may be operated only by personnel qualified for the specific
task in accordance with the relevant documentation, in particular its warning notices and safety instructions.
Qualified personnel are those who, based on their training and experience, are capable of identifying risks and
avoiding potential hazards when working with these products/systems.
Proper use of Siemens products
Note the following:
WARNING
Siemens products may only be used for the applications described in the catalog and in the relevant technical
documentation. If products and components from other manufacturers are used, these must be recommended
or approved by Siemens. Proper transport, storage, installation, assembly, commissioning, operation and
maintenance are required to ensure that the products operate safely and without any problems. The permissible
ambient conditions must be complied with. The information in the relevant documentation must be observed.
Trademarks
All names identified by ® are registered trademarks of Siemens AG. The remaining trademarks in this publication
may be trademarks whose use by third parties for their own purposes could violate the rights of the owner.
Disclaimer of Liability
We have reviewed the contents of this publication to ensure consistency with the hardware and software
described. Since variance cannot be precluded entirely, we cannot guarantee full consistency. However, the
information in this publication is reviewed regularly and any necessary corrections are included in subsequent
editions.

CP 154xSP-1
Operating Instructions, 12/2019, C79000-G8976-C426-05 3
Preface
Validity of this manual
This document contains information on the following modules:
●CP 1542SP-1
Article number 6GK7542-6UX00-0XE0
Hardware product version 1
Firmware version V2.1
Communications processor for connecting a SIMATIC ET 200SP CPU to Industrial
Ethernet
●CP 1542SP-1 IRC
Article number 6GK7542-6VX00-0XE0
Hardware product version 1
Firmware version V2.1
Communications processor for connecting a SIMATIC ET 200SP CPU via Industrial
Ethernet to a control center (TCSB, ST7, DNP3, IEC 60870-5-104)
●CP 1543SP-1
Article number 6GK7543-6WX00-0XE0
Hardware product version 1
Firmware version V2.1
Communications processor for connecting a SIMATIC ET 200SP CPU to Industrial
Ethernet, Security
Figure 1 CP 1542SP-1 with plugged in BusAdapter (here BA 2xRJ45)
On the front of the module at the right edge, the hardware version is printed as a placeholder
"X". If the printed text is, for example, "X 2 3 4", "X" would be the placeholder for hardware
product version 1.

Preface
CP 154xSP-1
4Operating Instructions, 12/2019, C79000-G8976-C426-05
Directly below, you will find the firmware version of the CP as it shipped.
The MAC address of the interface is printed on the front at the bottom left, above the
connectors for the power supply:
●00:1B:1B:xx:xx:01 (interface)
You can learn the MAC addresses of the ports via the online functions of STEP 7 (assessible
devices):
●00:1B:1B:xx:xx:02 (port X1P1)
●00:1B:1B:xx:xx:03 (port X1P2)
Product names, terms and abbreviations/acronyms
Below you will find abbreviations and product names used often in this manual.
●CP / module / device
When properties listed in this manual are valid for all three types of CP, these names are
used in place of the complete product names of all three types of CP.
If information is only valid for specific types of CP, the respective CP names are listed in
the text or in the section header.
New in this edition
●New firmware version V2.1, with the following functions among others:
–Support of additional SDTs for OUC blocks
–Greater number of configurable data points (telecontrol), see Configuration limits and
performance data (Page 24).
–Direct communication of the CP 1542SP-1 IRC between (DNP3 / IEC 60870-5)
●Description of the functions of firmware version V2.0:
–Connection to SINEMA Remote Connect (CP 1542SP-1 IRC / CP 1543SP-1)
–Configured e-mail independent of telecontrol communication (CP 1542SP-1 IRC /
CP 1543SP-1)
–Support of the telecontrol protocol SINAUT ST7 (CP 1542SP-1 IRC)
–Time synchronization via time of day of the communications partner
(CP 1542SP-1 IRC)
Released CPUs for CP firmware V2.0: CPUs as of firmware V2.0
Functions configurable in: STEP 7 Professional as of V15
●New ATEX/IECEx approval
●New structure of the documentation
The documentation for the CP consists of these operating instructions and additional
configuration manuals for the CP 1542SP-1 IRC, see below.

Preface
CP 154xSP-1
Operating Instructions, 12/2019, C79000-G8976-C426-05 5
Replaced edition
Edition 02/2018
Structure of the documentation
The documentation for the three CP types consists of the following manuals and contents:
●Operating instructions
Valid for all three CP types
–Application and functions
–Requirements (CPUs, configuration software, etc.)
–Hardware description
–Installation, wiring, commissioning, operation
–Configuration of the CP 1542SP-1 and CP 1543SP-1
For information on configuring the CP 1542SP-1 IRC, refer to the configuration
manuals.
–Diagnostics, maintenance
–Technical specifications, approvals, accessories
●Configuration manuals (CP 1542SP-1 IRC)
Configuration of the CP 1542SP-1 IRC is described in the following additional documents:
–SINAUT ST7 system manual
Volume 3 - Configuration under STEP 7 Professional (TIA Portal)
–Configuration manual Telecontrol Basic
Configuration and diagnostics in STEP 7 Professional (TIA Portal)
–Configuration manual DNP3
Configuration and diagnostics in STEP 7 Professional (TIA Portal)
–Configuration manual IEC
Configuration and diagnostics in STEP 7 Professional (TIA Portal)
You can find the Internet links for the manuals in the appendix Documentation references
(Page 113).
Required experience
To install, commission and operate the CP, you require experience in the following areas:
●Automation engineering
●Setting up the SIMATIC ET 200SP
●SIMATIC STEP 7 Professional

Preface
CP 154xSP-1
6Operating Instructions, 12/2019, C79000-G8976-C426-05
Current manual edition on the Internet
You will also find the current version of this manual on the Internet pages of Siemens
Industry Online Support:
●CP 1542SP-1 / CP 1543SP-1
Link: (https://support.industry.siemens.com/cs/ww/en/ps/22144/man)
●CP 1542SP-1 IRC
Link: (https://support.industry.siemens.com/cs/ww/en/ps/22143/man)
Cross references
In this manual there are often cross references to other sections.
To be able to return to the initial page after jumping to a cross reference, some PDF readers
support the command <Alt>+<left arrow>.
License conditions
Note
Open source software
Read the license conditions for open source software carefully before using the product.
You will find license conditions in the following document on the supplied data medium:
●OSS_CP-ET200SP_99.pdf
Security information
Siemens provides products and solutions with industrial security functions that support the
secure operation of plants, systems, machines and networks.
In order to protect plants, systems, machines and networks against cyber threats, it is
necessary to implement – and continuously maintain – a holistic, state-of-the-art industrial
security concept. Siemens’ products and solutions constitute one element of such a concept.
Customers are responsible for preventing unauthorized access to their plants, systems,
machines and networks. Such systems, machines and components should only be
connected to an enterprise network or the internet if and to the extent such a connection is
necessary and only when appropriate security measures (e.g. firewalls and/or network
segmentation) are in place.
For additional information on industrial security measures that may be implemented, please
visit
Link: (http://www.siemens.com/industrialsecurity)
Siemens’ products and solutions undergo continuous development to make them more
secure. Siemens strongly recommends that product updates are applied as soon as they are
available and that the latest product versions are used. Use of product versions that are no
longer supported, and failure to apply the latest updates may increase customers’ exposure
to cyber threats.

Preface
CP 154xSP-1
Operating Instructions, 12/2019, C79000-G8976-C426-05 7
To stay informed about product updates, subscribe to the Siemens Industrial Security RSS
Feed under
Link: (http://www.siemens.com/industrialsecurity)
Firmware
The firmware is signed and encrypted. This ensures that only firmware created by Siemens
can be downloaded to the device.
Device defective
If a fault develops, please send the device to your Siemens representative for repair. Repairs
on-site are not possible.
Recycling and disposal
The product is low in pollutants, can be recycled and meets the requirements of the WEEE
directive 2012/19/EU "Waste Electrical and Electronic Equipment".
Do not dispose of the product at public disposal sites. For environmentally friendly recycling
and the disposal of your old device contact a certified disposal company for electronic scrap
or your Siemens contact.
Keep to the local regulations.
You will find information on returning the product on the Internet pages of Siemens Industry
Online Support:
Link: (https://support.industry.siemens.com/cs/ww/en/view/109479891)
SIMATIC NET glossary
Explanations of many of the specialist terms used in this documentation can be found in the
SIMATIC NET glossary.
You will find the SIMATIC NET glossary here:
●SIMATIC NET Manual Collection or product DVD
The DVD ships with certain SIMATIC NET products.
●On the Internet under the following address:
Link: (https://support.industry.siemens.com/cs/ww/en/view/50305045)
Training, Service & Support
You will find information on training, service and support in the multilanguage document
"DC_support_99.pdf" on the Internet pages of Siemens Industry Online Support:
Link: (https://support.industry.siemens.com/cs/ww/en/view/38652101)

Preface
CP 154xSP-1
8Operating Instructions, 12/2019, C79000-G8976-C426-05

CP 154xSP-1
Operating Instructions, 12/2019, C79000-G8976-C426-05 9
Table of contents
Preface ................................................................................................................................................... 3
1 Application and functions ...................................................................................................................... 13
1.1 Components of the product ....................................................................................................13
1.2 Application ..............................................................................................................................13
1.3 Communications services .......................................................................................................14
1.4 Telecontrol communication (CP 1542SP-1 IRC) ....................................................................16
1.5 Communication via SINEMA RC (CP 1542SP-1 IRC, CP 1543SP-1) ...................................18
1.6 Security functions (CP 1542SP-1 IRC, CP 1543SP-1)...........................................................20
1.7 Other services and properties.................................................................................................23
1.8 Configuration limits and performance data.............................................................................24
1.9 Requirements for use..............................................................................................................27
1.9.1 Hardware requirements ..........................................................................................................27
1.9.2 Software requirements............................................................................................................28
1.10 Configuration examples ..........................................................................................................28
2 LEDs and connectors............................................................................................................................ 35
2.1 LEDs .......................................................................................................................................35
2.2 Power supply ..........................................................................................................................36
2.3 Connector for the BusAdapter ................................................................................................37
3 Installation, wiring, commissioning ........................................................................................................ 39
3.1 Important notes on using the device.......................................................................................39
3.1.1 Notes on use in hazardous areas ...........................................................................................39
3.1.2 Notes on use in hazardous areas according to ATEX / IECEx ..............................................41
3.1.3 Notes on use in hazardous areas according to UL HazLoc ...................................................41
3.1.4 General notices on use in hazardous areas according to FM ................................................42
3.2 Installing the CP......................................................................................................................42
3.3 Connecting the CP..................................................................................................................46
3.4 Commissioning the CP ...........................................................................................................47
4 Configuration ........................................................................................................................................ 49
4.1 Security recommendations .....................................................................................................49
4.2 Configuration in STEP 7 .........................................................................................................53
4.3 Communication types (CP 1543SP-1)....................................................................................55
4.4 Ethernet interface....................................................................................................................55
4.4.1 IPv6 .........................................................................................................................................55
4.4.2 Advanced options ...................................................................................................................56

Table of contents
CP 154xSP-1
10 Operating Instructions, 12/2019, C79000-G8976-C426-05
4.4.3 Access to the Web server ...................................................................................................... 57
4.5 Time-of-day synchronization.................................................................................................. 57
4.6 DNS configuration.................................................................................................................. 59
4.7 Communication with the CPU ................................................................................................ 59
4.8 SNMP..................................................................................................................................... 61
4.9 Security (CP 1543SP-1)......................................................................................................... 62
4.9.1 Security user .......................................................................................................................... 62
4.9.2 Firewall................................................................................................................................... 62
4.9.2.1 Pre-check of messages by the MAC firewall. ........................................................................ 62
4.9.2.2 Settings for online security diagnostics and downloading to station with the firewall
activated................................................................................................................................. 63
4.9.2.3 Notation for the source IP address (advanced firewall mode)............................................... 63
4.9.2.4 Firewall settings for S7 connections via a VPN tunnel .......................................................... 64
4.9.3 Log settings - Filtering of the system events ......................................................................... 64
4.9.4 E-mail configuration ............................................................................................................... 64
4.9.5 VPN........................................................................................................................................ 65
4.9.5.1 VPN (Virtual Private Network)................................................................................................ 65
4.9.5.2 SINEMA Remote Connect ..................................................................................................... 67
4.9.5.3 Creating a VPN tunnel for S7 communication between stations ........................................... 70
4.9.5.4 VPN communication with SOFTNET Security Client (engineering station)........................... 71
4.9.5.5 Establishment of VPN tunnel communication between the CP and SCALANCE M ............. 72
4.9.5.6 CP as passive subscriber of VPN connections...................................................................... 72
4.9.6 SNMP..................................................................................................................................... 73
4.9.7 Certificate manager................................................................................................................ 74
4.10 Messages: E-mails (CP 1543SP-1) ....................................................................................... 75
5 Program blocks..................................................................................................................................... 81
5.1 Program blocks for OUC........................................................................................................ 81
5.2 Changing the IP parameters during runtime.......................................................................... 84
5.3 MODBUS blocks .................................................................................................................... 85
6 Diagnostics and maintenance ............................................................................................................... 87
6.1 Diagnostics options ................................................................................................................ 87
6.2 Online security diagnostics via port 8448 (CP 1542SP-1 IRC, CP 1543SP-1) ..................... 90
6.3 Diagnostics with SNMP.......................................................................................................... 90
6.4 Web server of the CPU .......................................................................................................... 93
6.5 Processing status of e-mails (CP 1543SP-1) ........................................................................ 95
6.6 Downloading firmware ........................................................................................................... 97
6.7 Module replacement .............................................................................................................. 98
7 Technical specifications ........................................................................................................................ 99
A Approvals ............................................................................................................................................101
B Dimension drawings.............................................................................................................................107
C Accessories .........................................................................................................................................109

Table of contents
CP 154xSP-1
Operating Instructions, 12/2019, C79000-G8976-C426-05 11
C.1 BusAdapter ...........................................................................................................................109
C.2 Router SCALANCE M...........................................................................................................111
D Documentation references .................................................................................................................. 113
Index................................................................................................................................................... 117

Table of contents
CP 154xSP-1
12 Operating Instructions, 12/2019, C79000-G8976-C426-05

CP 154xSP-1
Operating Instructions, 12/2019, C79000-G8976-C426-05 13
Application and functions
1
1.1 Components of the product
The following components are supplied with the product:
●CP 154xSP-1
●Plug for the socket of the power supply (24VDC) of the CP
●DVD with documentation and license texts
A BusAdapter for the Ethernet connection of the CP does not ship with the product.
1.2 Application
Application of the CP variants
The CP is used to connect the ET 200SP to Industrial Ethernet via a copper cable or fiber-
optic cable. It can be used as an additional Ethernet interface of the CPU for S7
communication.
For the Ethernet connection, the CP requires a BusAdapter. The BusAdapter is not supplied
with the CP. For information on the compatible BusAdapters, refer to the section BusAdapter
(Page 109).
The three CP types are intended for the following communication tasks:
●CP 1542SP-1
The CP 1542SP-1 allows the ET 200SP a further Ethernet connection.
●CP 1543SP-1
The CP 1543SP-1 has Security functions for network security, such as a firewall and
VPN. This makes protected access to the ET 200SP possible.

Application and functions
1.3 Communications services
CP 154xSP-1
14 Operating Instructions, 12/2019, C79000-G8976-C426-05
●CP 1542SP-1 IRC
The CP 1542SP-1 IRC supports telecontrol communication for connecting the ET 200SP
CPU to a control center. One of the following telecontrol protocols can be used as an
alternative:
–TeleControl Basic
For connection of the ET 200SP CPU to a control center with telecontrol server
(TCSB)
–ST7
For connection of the ET 200SP CPU to a control center with SINAUT ST7
–DNP3
For connection of the ET 200SP CPU to DNP3 master
–IEC 60870-5-104
For connection of the ET 200SP CPU to IEC master
1.3 Communications services
Communications services
The following communications services are supported:
●S7 communication and PG/OP communication with the following functions:
–PUT/GET as client and server for data exchange with S7 stations
–USEND/URCV for uncoordinated data exchange with a remote partner
–BSEND/BRCV for exchanging large volumes of data with a partner
–PG functions
–Operator control and monitoring functions (HMI)
For fully specified S7 connections, the CP requires a fixed IP address.
●S7 routing
–Routing of S7 connections via the backplane bus and the CPU to other S7 stations
●SINEMA Remote Connect (SINEMA RC)
As of firmware version V2.0, the following CP types support communication via
SINEMA RC as of software version V1.3:
–CP 1542SP-1 IRC
–CP 1543SP-1
See section Communication via SINEMA RC (CP 1542SP-1 IRC, CP 1543SP-1)
(Page 18).
For the manual, see /8/ (Page 115).

Application and functions
1.3 Communications services
CP 154xSP-1
Operating Instructions, 12/2019, C79000-G8976-C426-05 15
●Open User Communication (OUC)
OUC via program blocks with the following protocols:
–TCP/IP
–ISO-on-TCP
–UDP
The CP 1543SP-1 supports Secure OUC.
You will find the program blocks supported by the three CP types in the section Program
blocks (Page 81).
●E-mail using program blocks
●HTTP / HTTPS
Via HTTP / HTTPS you can access the Web server of the CPU.
For telecontrol communication of the CP 1542SP-1 IRC, see section Telecontrol
communication (CP 1542SP-1 IRC) (Page 16).
For information on the Security functions of the CP 1543SP-1, refer to the section Security
functions (CP 1542SP-1 IRC, CP 1543SP-1) (Page 20).

Application and functions
1.4 Telecontrol communication (CP 1542SP-1 IRC)
CP 154xSP-1
16 Operating Instructions, 12/2019, C79000-G8976-C426-05
1.4 Telecontrol communication (CP 1542SP-1 IRC)
Telecontrol protocols
In addition to the communications services named above, the CP 1542SP-1 IRC supports
the following telecontrol protocols for communication with a master station and other
telecontrol stations:
●TeleControl Basic *
Proprietary protocol for telecontrol applications. The IP-based protocol is used to connect
the CP to the application TCSB.
TCSB is installed on a PC in the master station, the telecontrol server. Via the OPC-DA or
OPC-UA server of TCSB, an OPC client can access the process data of the CP.
TCSb is supported as of the following version: V3.0 + SP3
For the TCSB manual, see /4/ (Page 114).
●ST7
Proprietary protocol for telecontrol applications in the SINAUT ST7 system. The protocol
is used to connect the CP to ST7 control centers.
The SINAUT ST7 supports the following functions, among others:
–Communication with the master station
–Communication with other stations
–MSC transmission protocol
Under SINAUT S7, the CP uses the following variants of the MSC transmission
protocol on OSI layer 3:
-MSC (default setting)
-MSCsec when security requirements are higher ("Security" activated)
–Communication using mobile wireless
Communication via a mobile wireless network combined with the Internet is made
possible by a SCALANCE M router. The SCALANCE M product series provides
various VPN routers with IPsec, encryption software and their own firewall.
You will find a list of routers in the appendix Router SCALANCE M (Page 111).

Application and functions
1.4 Telecontrol communication (CP 1542SP-1 IRC)
CP 154xSP-1
Operating Instructions, 12/2019, C79000-G8976-C426-05 17
●DNP3 *
The CP functions as a DNP3 station (outstation).
Communication is based on the DNP3 SPECIFICATION Version 2.11 (2007/2009).
You will find a detailed overview of the attributes and properties of the DNP3 protocol that
are supported by the CP in the DNP3 device profile; see
Link: (https://support.industry.siemens.com/cs/ww/en/ps/22143/man)
Communications partners of the CP can be:
DNP3 master:
–SIMATIC PCS 7 TeleControl
–SIMATIC WinCC TeleControl
–SIMATIC WinCC OA
–A TIM module with DNP3 capability (TIM 3V IE DNP3 / TIM 4R IE DNP3)
For the manual of the TIM module see /5/ (Page 114).
–Third-party systems that support the DNP3 specification named above.
DNP3 stations (outstation):
–CPUs in stations
For direct communication, the "Master function" is enabled for the sending data point.
●IEC 60870-5-104 *
The CP functions as a substation (slave).
Communication is based on the specification IEC 60870-5 Part 104 (2006).
You will find a detailed overview of the attributes and properties of the IEC specification
that are supported by the CP in the IEC device profile; see
Link: (https://support.industry.siemens.com/cs/ww/en/ps/22143/man)
Communications partners of the CP can be:
IEC master:
–SIMATIC PCS 7 TeleControl
–SIMATIC WinCC TeleControl
–SIMATIC WinCC OA
–Third-party systems that support the IEC specification named above.
Stations:
–CPUs in stations
For direct communication, the "Master function" is enabled for the sending data point.
*Optional telecontrol communication with the master station via SINEMA Remote Connect,
see section Communication via SINEMA RC (CP 1542SP-1 IRC, CP 1543SP-1) (Page 18).

Application and functions
1.5 Communication via SINEMA RC (CP 1542SP-1 IRC, CP 1543SP-1)
CP 154xSP-1
18 Operating Instructions, 12/2019, C79000-G8976-C426-05
Further properties of the CP 1542SP-1 IRC
●Data point configuration
The process values are configured as data points for the communication.
No program blocks need to be programmed for the CP 1542SP-1 IRC to transfer user
data between the station and communications partner.
The data areas in the memory of the CPU intended for communication with the partner
are configured for the specific data points in the CP. Each data point addresses a PLC
tag or element in a data block of the CPU.
The data points can be processed individually in the control system.
●Messages / e-mail
With configurable events in the process image of the CPU, the CP can send messages
as e-mails. The data sent by e-mail is configured using PLC tags.
●Send buffer
The CP saves the values of data points configured as an event in the send buffer. It
transmits the data from the send buffer spontaneously or bundled to the communications
partner.
The data is not saved retentively. It is lost in the event of a power failure.
●Analog value processing
Analog values can be preprocessed on the CP according to various methods.
You can find additional information in the telecontrol configuration manuals, refer to /10/
(Page 115).
1.5 Communication via SINEMA RC (CP 1542SP-1 IRC, CP 1543SP-1)
Validity
The following types of communication via SINEMA Remote Connect are supported by the
CPs:
●CP 1543SP-1
–Remote maintenance via SINEMA Remote Connect
●CP 1542SP-1 IRC
–Remote maintenance via SINEMA Remote Connect
–Telecontrol communication via SINEMA Remote Connect
Consider this in the applications described below.

Application and functions
1.5 Communication via SINEMA RC (CP 1542SP-1 IRC, CP 1543SP-1)
CP 154xSP-1
Operating Instructions, 12/2019, C79000-G8976-C426-05 19
Communication via SINEMA Remote Connect (SINEMA RC)
The "SINEMA RC Server" application provides end-to-end connection management of
distributed networks via the Internet. This also includes secure remote access to lower-level
stations. Communication between SINEMA RC Server and the remote devices takes place
via a VPN tunnel with consideration of the stored access rights.
SINEMA RC uses OpenVPN for encryption of the data. The center of the communication is
SINEMA RC Server via which communication runs between the subscribers and that
manages the configuration of the communications system.
SCALANCE M routers, which you can use for the connection, also support OpenVPN and
connection to SINEMA Remote Connect.
For the CP firmware version required for communication via SINEMA RC see section
Communications services (Page 14).
Parameter groups
You configure communication via SINEMA RC and telecontrol communication via SINEMA
RC in two parameter groups:
●Communication via SINEMA RC:
> "Security > VPN"
●Telecontrol communication via SINEMA RC:
> "Communication types"
For information on the configuration, refer to the telecontrol configuration manuals /10/
(Page 115).
Applications
The following application options result from the combination of the parameters for
telecontrol communication and SINEMA RC.
Application example:
●(1) No telecontrol and no SINEMA RC (CP for network separation only)
●(2) CP only for remote maintenance via SINEMA RC
●(3) CP for telecontrol communication only
●(4) CP uses telecontrol communication, but SINEMA RC only for remote maintenance.
●(5) CP uses SINEMA RC for telecontrol communication and remote maintenance.
The table provides an overview of the applications with the respective parameter settings.
●"On" means that the parameter is activated.
●"Off" means that the parameter is deactivated.

Application and functions
1.6 Security functions (CP 1542SP-1 IRC, CP 1543SP-1)
CP 154xSP-1
20 Operating Instructions, 12/2019, C79000-G8976-C426-05
Table 1- 1 Use cases and parameters to be activated
Use case
Parameter settings
(Parameters abbreviated) *
SRC
TC
TC-SRC
(1)
Off
Off
Off
(2)
On
Off
Off
(3)
Off
On
Off
(4)
On
On
Off
(5) On On On
*
Explanation of the parameter abbreviations:
SRC
- Security > VPN (activated) > "VPN connection type":
"Automatic OpenVPN configuration via SINEMA Remote Connect Server"
TC
- Communication types > Telecontrol communication enabled
TC-SRC
- Communication types >
"Activate telecontrol communication via SINEMA Remote Connect"
1.6 Security functions (CP 1542SP-1 IRC, CP 1543SP-1)
Security functions are available for the following CP types:
●CP 1543SP-1
The security functions are enabled in the configuration of the CP.
●CP 1542SP-1 IRC
You will find a description of the security functions in the telecontrol configuration
manuals, see /10/ (Page 115).
For information on the security functions of the Open User Communication program blocks,
see section Program blocks (Page 81).
Note
Recommendation for critical security plants
Refer to the information in the section
Security recommendations (Page 49).
CP 1543SP-1
With Industrial Ethernet Security, individual devices, automation cells or network segments
of an Ethernet network can be protected. The data transfer via the CP 1543SP-1 can be
protected from the following attacks by a combination of different security measures:
●Data espionage
●Data manipulation
●Unauthorized access