SIEMENS
2/574
Siemens IK PI · 2015
PROFINET/Industrial Ethernet
Communication for SIMATIC S7-400
CP 443-1 Advanced
2
■
Design
The CP 443-1 Advanced offers all the advantages of
SIMATIC S7-400 system design:
•
Compact design:
- Five RJ45 jacks for connecting to Industrial Ethernet via two
independent interfaces; one of which is a security socket for
externally safeguarding the network cell; automatic data rate
detection by means of the autosensing and autocross
function; the connection is made via the IE FC RJ45 Plug
180
with 180° cable outlet or via a standard patch cable
- Diagnostics LEDs for indicating the operational and commu-
nication status
•
Simple installation;
the CP 443-1 Advanced is mounted on the S7-400 rack and
connected to other modules by means of the backplane bus.
There are no slot rules.
•
The CP 443-1 Advanced can be operated without a fan.
•
In combination with IM 460/461, the CP 443-1 Advanced can
also be used in an expansion rack (ER).
•
The module can be replaced without the need for a
programming device
•
C-PLUG (configuration plug) is included in scope of delivery
as a swap medium (cannot be operated without C-PLUG).
■
Function
•
Two separate interfaces (integrated network separation):
- Gigabit interface with one RJ45 port with
10/100/1 000 Mbit/s, full/half-duplex with auto-sensing
capability
- PROFINET interface with four RJ45 ports with 10/100 Mbit/s
full/half duplex with autosensing and autocrossover function-
ality via integrated 4-port switch
•
Communications services via both interfaces:
- Open communication (TCP/IP and UDP):
Multicast with UDP, including routing between both inter-
faces
- PG/OP communication: inter-network with S7 routing
- S7 communication (client, server, multiplexing) including
routing between both interfaces
- S7-H-communication for S7-400-H-systems, now also
across network boundaries (ISO-on-TCP)
- IT communication:
HTTP communication permits access to process data via
user's own Web pages. HTTPS communication is also
possible with the CP 443-1 Advanced
1)
.
The e-mail client function allows e-mails to be sent directly
from the user program.
FTP communication allows program-controlled FTP client
communication.
Access to data blocks via FTP server.
•
Communication services via PROFINET interfaces:
- Certified PROFINET IO controller with real-time properties
(RT and IRT)
- PROFINET CBA
- IP address assignment via DHCP, simple PC tool or via user
program (e.g. for HMI)
•
Media redundancy (MRP):
- Within an Ethernet network with a ring topology, the
CP supports the MRP media redundancy protocol as an
MRP manager and as an MRP client
•
Diagnostics and network management:
- Comprehensive diagnostics functions for all modules in the
rack (including graphical diagnostics, e.g. topology)
- Integration in network management systems due to support
of SNMP V1/V3
•
Security mechanisms:
- Access protection by means of configurable IP access list
- Firewall for filtering connections on the basis of their IP/port
addresses
- Bandwidth limitation to avoid communication overload
-
VPN server and VPN client for tap-proof access to controllers
- Encrypted HTML pages using SSL (HTTPs)
- Secure file transfer (FTPs)
- Tap-proof transfer of network analysis information to the
network management system (SNMP)
- Translation of private and public IP addresses (NAT/NAPT)
- Secure transfer of the time of day (NTP V3)
- Secure firmware update
- Plagiarism detection
- Certification as per the Achilles Level II Standard
http://wurldtech.com/product_services/certify_educate/
certified_products/
•
Configuration of all functions with STEP 7;
The security functions are configured using the Security
Configuration Tool (SCT), which is included in the scope of
delivery for STEP 7 V5.5 SP2 HF1.
•
Configuration with STEP 7 Professional V11;
only possible with a limited range of functions of the prede-
cessor CP 443-1 (6GK7 443-1GX20-0XE0), without security
functions and CBA.
Version with security functions
1)
for TIA Portal in planning.
•
When using the blocks AG_SSEND (FC53), AG_SRECV
(FC63), TSEND (FB63), TRCV (FB64), TCON (FB65) and
TDISCON (FB66), please note the following information:
•
Module replacement without programming device:
all information is stored on the C-PLUG (also file system for
IT functions)
© Siemens AG 2014