SIPLUS S7-400 CP 443-1 Advanced Siemens

Область применения

The CP 443-1 Advanced is used to connect the SIMATIC S7-400 to Industrial Ethernet networks. With its own processor, it relieves the CPU of communication tasks and facilitates additional connections.

The CP 443-1 Advanced provides the following communication options:

• PGs/PCs
• Master computers
• HMI systems
• SIMATIC S5/S7/C7 systems
• PROFINET I/O devices
• PROFINET CBA components

All the devices of an Ethernet network can be protected from unauthorized access. The CP 443-1 Advanced allows safe remote access over the Internet and allows data transfer between devices or network segments to be protected from data manipulation/espionage.

PROFINET CBA components and security functionalities can be used as an alternative.

Secure VPN communication between SCALANCE S, SOFTNET Security Client and components with Security Integrated

Обзор

• Connection of SIMATIC S7-400 to Industrial Ethernet
  • Multi-protocol operation for ISO, TCP/IP, UDP and PROFINET IO protocols
  • Adjustable keep-alive function
• Two separate interfaces (integrated network separation):
  • Gigabit interface with one RJ45 port with 10/100/1 000 Mbit/s, full/half-duplex with auto-sensing capability
  • PROFINET interface with four RJ45 ports with 10/100 Mbit/s, full/half duplex with autosensing and autocrossover functionality via integrated 4-port switch
• Communications services via both interfaces
  • Open communication (ISO, TCP/IP and UDP), multicast with UDP, including routing between both interfaces
  • PG/OP communication:
    Cross-network by means of S7 routing
  • S7 communication (client, server, multiplexing) including routing between both interfaces
  • IT communication:
    HTTP communication supports access to process data via own Web pages;
    e-mail client function, sending of e-mails with authentication directly from user program;
    FTP communication supports program-controlled FTP client communication;
    access to data blocks through FTP server
• Communications services via PROFINET interface
  • PROFINET IO controller with real-time properties (RT and IRT)
  • PROFINET CBA
  • IP address assignment via DHCP, simple PC tool or via the user program (e.g. HMI)
  • Support of the prioritized startup of PROFINET IO devices
  • Configuration with STEP 7
• Media redundancy (MRP);
  the CP supports the media redundancy procedure MRP within an Ethernet network with ring topology.
• Access protection by means of configurable IP access list
• Module replacement without programming device;
  all information is stored on the C-PLUG (also file system for IT functions)
• Extensive diagnostic functions for all modules in the rack
• Integration into network management systems through the support of SNMP V1 MIB-II
• Operation in the SIMATIC H system for redundant S7-communication
• Operation in fail-safe applications (PROFIsafe) in combination with SIMATIC S7-400 CPU 416F

Note:

SIPLUS extreme products are based on SIMATIC standard products. The contents listed here were taken from the respective standard products. SIPLUS extreme specific information was added.

Technical documentation on SIPLUS can be found here:
http://www.siemens.de/siplus-extreme

Дизайн

The CP 443-1 Advanced offers all the advantages of SIMATIC S7-400 system design:

• Compact design:
  • Five RJ45 jacks for connecting to Industrial Ethernet via two independent interfaces; one of which is a security socket for externally safeguarding the network cell; automatic data rate detection by means of the autosensing and autocross function; the connection is made via the IE FC RJ45 Plug 180 with 180° cable outlet or via a standard patch cable
  • Diagnostics LEDs for indicating the operational and communication status
• Simple installation;
  the CP 443-1 Advanced is mounted on the S7-400 rack and connected to other modules by means of the backplane bus. There are no slot rules.
• The CP 443-1 Advanced can be operated without a fan.
• In combination with IM 460/461, the CP 443-1 Advanced can also be used in an expansion rack (ER).
• The module can be replaced without the need for a programming device
• C-PLUG (configuration plug) is included in scope of delivery as a swap medium (cannot be operated without C-PLUG).

Функции

• Two separate interfaces (integrated network separation):
  • Gigabit interface with one RJ45 port with 10/100/1 000 Mbps, full/half-duplex with auto-sensing capability
  • PROFINET interface with four RJ45 ports with 10/100 Mbps full/half duplex with autosensing and autocrossover functionality via integrated 4-port switch
• Communication services via both interfaces:
  • Open communication (TCP/IP and UDP):
    Multicast with UDP, including routing between both interfaces
  • PG/OP communication: Inter-network with S7 routing
  • S7 communication (client, server, multiplexing) including routing between both interfaces
  • S7 H communication for S7-400 H systems, now also across network boundaries (ISO-on-TCP)
  • IT communication:
    HTTP communication permits access to process data via user''s own Web pages. HTTPS communication is also possible with the CP 443-1 Advanced¹⁾.
    The e-mail client function allows e-mails to be sent directly from the user program.
    FTP communication allows program-controlled FTP client communication.
    Access to data blocks via FTP server.
• Communication services via PROFINET interfaces:
  • Certified PROFINET IO controller with real-time properties (RT and IRT)
  • PROFINET CBA
  • IP address assignment via DHCP, simple PC tool or via user program (e.g. for HMI)
• Media redundancy (MRP):
  • Within an Ethernet network with a ring topology, the CP supports the MRP media redundancy protocol as an MRP manager and as an MRP client
• Diagnostics and network management:
  • Comprehensive diagnostics functions for all modules in the rack (including graphical diagnostics, e.g. topology)
  • Integration in network management systems due to support of SNMP V1/V3
• Security mechanisms:
  • Access protection by means of configurable IP access list
  • Firewall for filtering connections on the basis of their IP/port addresses
  • Bandwidth limitation to avoid communication overload
  • VPN server and VPN client for tap-proof access to controllers
  • Encrypted HTML pages using SSL (HTTPs)
  • Secure file transfer (FTPs)
  • Tap-proof transfer of network analysis information to the network management system (SNMP)
  • Translation of private and public IP addresses (NAT/NAPT)
  • Secure transfer of the time of day (NTP V3)
  • Secure firmware update
  • Plagiarism detection
  • Certification as per the Achilles Level II Standard
    http://www.wurldtech.com/product_services/certifications/certified_products/
• Configuration of all functions with STEP 7;
  The security functions are configured using the Security Configuration Tool (SCT) included in the scope of delivery for STEP 7 V5.5 SP2 HF1.
• Configuration with STEP 7 Professional V11;
  only possible with a limited range of functions of the predecessor CP 443-1 (6GK7 443-1GX20-0XE0), without security functions and CBA.
  Version with security functions for TIA Portal in the planning stages.
• When using the blocks AG_SSEND (FC53), AG_SRECV (FC63), TSEND (FB63), TRCV (FB64), TCON (FB65) and TDISCON (FB66), please note the following information: http://support.automation.siemens.com/WW/view/en/60037071
• Module replacement without programming device:
  All information is stored on the C-PLUG (as well as file system for IT functions)

Интеграция

Connection to higher-level network

Small independent local networks (e.g. within a machine or cell)

Особенности

• Cost advantage due to connection to two separate Ethernet segments with integrated network separation
• High plant availability through the support of media redundancy (MRP) and use in the SIMATIC S7-400 H system
• Optimum support of maintenance through
  • Web-based diagnostics
  • Remote programming via WAN or telephone network (ISDN)
  • Monitoring with IT network management tools (SNMP)
  • Module replacement without programming device using the C-PLUG swap medium
• Securing the system against unauthorized access by means of
  • Central access protection for any devices within an automation cell, e.g. by means of authentication of the network stations
  • Secure remote access via the Internet by means of data encryption (VPN) and data integrity checking
  • Traceability by means of data logging on the basis of standard IT mechanisms (Syslog)
• Later connection of existing SIMATIC S7 systems to Industrial Ethernet using the CP 443-1 Advanced ensures investment protection

Технические данные