SIPLUS NET CP 1543-1

Заказные данные
(1)
Аксессуары
(6)

The SIMATIC CP 1543-1 communications processor securely connects the new SIMATIC S7-1500 controller to Industrial Ethernet networks. By combining a variety of security features such as an SPI (Stateful Packet Inspection) firewall, VPN and data encryption protocols such as FTPS and SNMPv3, the communications processor protects individual S7-1500 stations or even entire automation cells against unauthorized access.

The CP can also be used for linking the S7-1500 station into an IPv6-based network. All functions are configured by means of STEP 7 Professional V12 (TIA Portal) or higher.

The CP 1543-1 supports the following communications services:

PG/OP communication
S7 communication
Open communication (SEND/RECEIVE, FETCH/WRITE)
IT communication
- FTP functions (File Transfer Protocol FTP/FTPS) for file management and access to data blocks in the CPU (client and server function)
- Sending e-mails via SMTP or ESMTP with "SMTP-Auth" for authentication on an e-mail server (also with IPv6)
Security functions
- Stateful Packet Inspection (layers 3 and 4) firewall
- Secure communication via VPN (IPsec)
- Secure access to the Web server of the CPU via the HTTPS protocol
- Secure file transfer using FTPS
- Secure transfer of the time of day (NTP)
- SNMPv3 for tap-proof transfer of network analysis information
Integration of the S7-1500 into IPv6-based networks;
An IPv6-compliant IP address can be used for the following communication services:
- FETCH/WRITE access (CP as server)
- FTP server mode
- FTP client mode with addressing by program block
- E-mail transfer with addressing by program block

Note

SIPLUS extreme products are based on SIMATIC standard products. The contents listed here were taken from the respective standard products. SIPLUS extreme specific information was added.

Область применения

The CP 1543-1 is used to connect the SIMATIC S7-1500 to Industrial Ethernet networks. With its own processor, it relieves the CPU of communications tasks and facilitates additional connections.

The CP 1543-1 provides communication options with:

PGs/PCs,
master computers
operator control and monitoring systems,
other SIMATIC S5/S7 systems.

This can be used to protect the SIMATIC S7-1500 from unauthorized access from an Ethernet network. The CP 1543-1 allows safe remote access via a LAN and allows data transfer between devices or network segments to be protected from data manipulation/espionage.

Protection of the SIMATIC S7-1500 system from unauthorized access from the Industrial Ethernet network

Дизайн

The CP 1543-1 features all the advantages of the SIMATIC S7-1500 design:

Compact design:
- One RJ45 jack for connecting to Industrial Ethernet;
  automatic data rate detection using autosensing, autocrossing and autonegotiation;
  the connection is made via the IE FC RJ45 Plug 180 with 180° cable outlet or via a standard patch cable
- The module is supplied with power via the integrated backplane bus
- Three LEDs for displaying the operational and communications status of the module and one LED under the front cover for the Ethernet interface to display ACTIVITY and LINK.
Simple installation:
The CP 1543-1 is mounted on the rail of the S7-1500 and connected to the adjacent modules by means of the bus connectors.
The CP 1543-1 can be operated without a fan; no backup battery is required.
The module can be replaced without the need for a programming device.

Функции

Gigabit interface with RJ45 connector with 10/100/1000 Mbps full/half duplex with autosensing functionality
Communication services:
- Open communication (TCP/IP, UDP, ISO):
  Multicast with UDP
- PG/OP communication: Inter-network with S7 routing
- S7 communication (client, server)
- IT communication:
  HTTP communication grants access to the web server of the S7-1500 system. With the CP 1543-1, HTTPS communication is also possible.
  The e-mail client function allows e-mails to be sent directly from the user program.
  FTP communication allows program-controlled FTP client communication.
  Access to data blocks in the CPU via FTP server.
- IP address assignment using DHCP with IPv4 or by entering the address directly in the engineering software
  STEP 7 Professional V12 (TIA Portal) or higher
Diagnostics and network management:
- Extensive diagnostic functions for all modules in the S7-1500 system
- Integration in network management systems due to support of SNMP V1/V3
Security mechanisms:
- Access protection with firewall for filtering connections on the basis of their IP and MAC addresses
- Secure communication via VPN (IPsec)
- Encrypted HTML pages using SSL (HTTPS)
- Secure file transfer (FTPS)
- Tap-proof transfer of network analysis information to the network management system (SNMPv3)
- Secure transfer of the time of day (NTP)
- Certification as per the Achilles Level II Standard
  http://www.wurldtech.com/product_services/certifications/certified_products/
Configuration of all functions with STEP 7 Professional V14 (TIA Portal) or higher
Module replacement without programming device: All information can be stored on the memory card of the CPU.

Интеграция

Connection to a higher-level network with network separation and access protection (firewall function)

Connection to higher-level network and network separation of automation cells

Особенности

Reachability of the SIMATIC S7-1500 station from an IPv6-based infrastructure
Optimum support of maintenance due to
- Simple diagnostics via the central Web server
- Remote programming via LAN
- Monitoring with IT network management tools (SNMP)
- Module replacement without a PG
Securing the system against unauthorized access with
- Central access protection for any S7 station
- Secure access to the central Web server
Network separation for setting up identical machines with the same IP address
Simple alerting by e-mail and transfer of production data to master computer using FTP
Protection of investment thanks to simple integration of the SIMATIC S7-1500 system in existing networks with SIMATIC S7-300 / S7-400 / S5 via Industrial Ethernet using the CP 1543-1

Технические данные

Order number		6GK7543-1AX00-0XE0
Product type designation		CP 1543-1
Transmission rate
Transfer rate
● at the 1st interface		10 ... 1 000 Mbit/s
Interfaces
Number of interfaces acc. to Industrial Ethernet		1
Number of electrical connections
● at the 1st interface acc. to Industrial Ethernet		1
Type of electrical connection
● at the 1st interface acc. to Industrial Ethernet		RJ45 port
Supply voltage, current consumption, power loss
Type of voltage of the supply voltage		DC
Supply voltage 1 from backplane bus		15 V
Relative symmetrical tolerance at DC
● at 15 V		3 %
Consumed current
● from backplane bus at DC at 15 V typical		0.35 A
Power loss [W]		5.3 W
Permitted ambient conditions
Ambient temperature
● for vertical installation during operation		0 ... 40 °C
● for horizontally arranged busbars during operation		0 ... 60 °C
● during storage		-40 ... +70 °C
● during transport		-40 ... +70 °C
Relative humidity at 25 °C without condensation during operation maximum		95 %
Protection class IP		IP20
Design, dimensions and weight
Module format		Compact module S7-1500 single width
Width		35 mm
Height		142 mm
Depth		129 mm
Net weight		0.35 kg
Mounting type
● S7-1500 rail mounting		Yes
Product properties, functions, components general
Number of units
● per CPU maximum		8
● Note		depending on CPU type
Performance data open communication
Number of possible connections for open communication
● by means of T blocks maximum		118; depending on the system upper limit
Amount of data
● as user data per ISO on TCP connection for open communication by means of T blocks maximum		65 536 byte
Number of Multicast stations		118
Performance data S7 communication
Number of possible connections for S7 communication
● maximum		118
● Note		depending on the system upper limit
Performance data multi-protocol mode
Number of active connections with multi-protocol mode		118
Performance data IT functions
Number of possible connections
● as client by means of FTP maximum		32
● as server by means of FTP maximum		16
● as server by means of HTTP maximum		4
● as e-mail client maximum		1
Amount of data as user data for email maximum		64 Kibyte
Performance data telecontrol
Protocol is supported
● TCP/IP		Yes
Product function MIB support		Yes
Protocol is supported
● SNMP v1		Yes
● DCP		Yes
● LLDP		No
Configuration software
● required		STEP 7 Professional V12 (TIA Portal) or higher
Identification & maintenance function
● I&M0 - device-specific information		Yes
● I&M1 – higher-level designation/location designation		Yes
Product functions Diagnosis
Product function Web-based diagnostics		Yes; yes, via S7-1500 CPU
Product functions Routing
Product function
● Static IP routing		Yes
● Static IP routing IPv6		No
● dynamic IP routing		No
● dynamic IP routing IPv6		No
Protocol is supported
● RIP v1		No
● RIPv2		No
● RIPnG for IPv6		No
● OSPFv2		No
● OSPFv3 for IPv6		No
● VRRP		No
● VRRP for IPv6		No
● BGP		No
● PPP		No
● PPoE via DSL		No
Product functions Security
Firewall version		stateful inspection
Product function with VPN connection		IPSec
Type of encryption algorithms with VPN connection		AES-256, AES-192, AES-128, 3DES-168, DES-56
Type of authentication procedure with VPN connection		Preshared key (PSK), X.509v3 certificates
Type of hashing algorithms with VPN connection		MD5, SHA-1
Number of possible connections with VPN connection		16
Product function
● password protection for Web applications		No
● ACL - IP-based		No
● ACL - IP-based for PLC/routing		No
● switch-off of non-required services		Yes
● Blocking of communication via physical ports		No
● log file for unauthorized access		Yes
Product functions Time
Product function SICLOCK support		Yes
Product function pass on time synchronization		Yes
Protocol is supported
● NTP		Yes

Дальнейшая информация

You will find more information on SIMATIC S7-1500 at http://www.siemens.com/simatic-s7-1500

The SIMATIC NET Selection Tool is available to assist in selecting the right Industrial Ethernet switches as well as the configuration of modular variants:

Online version:
http://www.siemens.com/snst

Offline version:
http://www.siemens.com/snst-download

You will find more information on the topic of Industrial Security on the Internet at:

http://www.siemens.com/industrialsecurity