CP 1543SP-1

Заказные данные
(1)
Аксессуары
(26)

The CP 1543SP-1 communications processor connects the ET 200SP Distributed Controller with Industrial Ethernet networks. By combining a variety of security features such as an SPI (Stateful Packet Inspection) firewall, VPN and data encryption protocols (e.g. SNMPv3), the communications processor protects individual ET 200SP Distributed Controllers or even entire automation cells against unauthorized access.

The module can also be used for integrating the ET 200SP Distributed Controller into an IPv6-based network. All functions can be configured with STEP 7 Professional, V14 and higher (TIA Portal).

The CP 1543SP-1 supports the following communication services:

PG/OP communication
S7 communication
Open communication (Open User Communication)
IT communication
- FTP functions (File Transfer Protocol FTP/FTPS) for file management and access to data blocks in the CPU (client and server function)
- Sending e-mails via SMTP or ESMTP with "SMTP-Auth" for authentication on an e-mail server (also with IPv6)
Security functions
- Stateful Packet Inspection (layer 3 and 4 firewall)
- Secure communication via VPN (IPsec)
- Secure access to the web server of the CPU via the HTTPS protocol
- Secure transfer of the time of day (NTP)
- SNMPv3 for tap-proof transfer of network analysis information
Integration of the ET 200SP Distributed Controller into IPv6-based networks

Область применения

The CP 1543SP-1 is used for connecting the ET 200 SP Distributed Controller to Industrial Ethernet networks. With its own processor, it relieves the CPU of communication tasks.

The CP 1543SP-1 offers possible communication with:

PGs/PCs
Master computers
Operator control and monitoring systems
SIMATIC S7 systems

It can be used to protect the ET 200 SP Distributed Controller automation system from unauthorized access from an Ethernet network. The CP 1543SP-1 allows secure remote access via a LAN and enables the data transfer between devices or network segments to be protected from data manipulation/espionage.

Connection to higher-level network and network separation of automation cells

Дизайн

The CP 1543SP-1 has all the advantages of the ET 200SP design:

Compact, space-saving design:
- Module powered via separate power supply
- Three LEDs for displaying the operating state and communication state of the module as well as LEDs on the bus adapter.
- Simultaneously operable with BA Send module and CM DP module.
Simple installation:
The CP 1543SP-1 is mounted on the ET 200SP DIN rail and is connected to the adjacent modules via the backplane bus.
- The bus adapter (not included in scope of delivery) makes various connection methods possible;
- For standard environmental conditions, BA 2xRJ45 for connection via RJ45 connector
- For mechanical loading during operation and/or increased EMC requirements
  BA 2xFC, BA 2xLC, BA LC/RJ45, BA LC/FC, BA 2xSCRJ, BA SCRJ/RJ45, BA SCRJ/FC
- The CP 1543SP-1 can be operated without a fan; no backup battery is required.
- The module can be replaced without the need for a programming device.
The CP can be equipped with an equipment labeling plate.
Optional labeling using light gray or yellow labeling strips. There is a choice of two materials:
- Film and roll with 500 strips, for thermal transfer roll printer
- Paper (280 g/m2), DIN A4 sheets with 100 strips each, for laser printer

Scope of delivery:
CP 1543SP-1, 24 V DC connector (bus adapter must be ordered separately)

Функции

2-port interface via bus adapter with an RJ45 connection with 10/100 Mbps full/half duplex with autosensing functionality
The CP 1543SP-1 communications processor connects the ET 200SP Distributed Controller to additional Industrial Ethernet networks.
Communication services:
- Open communication (TCP/IP, UDP, ISO-on-TCP):
  Multicast with UDP
- PG/OP communication: Inter-network with S7 routing
- S7 communication (client, server)
- S7 routing
- IT communication:
  HTTP communication allows access to the web server of the CPU. With the CP 1543SP-1, HTTPS communication is also possible.
  The e-mail client function allows e-mails to be sent directly from the user program.
  IP address assignment via DHCP for IPv4 or via direct entry in the engineering software and via the T_CONFIG function block
  STEP 7 Professional V14 (TIA Portal) or higher
Diagnostics and network management:
- Extensive diagnostic functions of all modules in the ET 200SP system
- Integration in network management systems due to support of SNMP v1/v3
Security mechanisms:
- Access protection with firewall for filtering connections on the basis of their IP and MAC addresses
- Secure communication via VPN (IPsec)
- Encrypted HTML pages using SSL (HTTPS)
- Secure transfer of the time of day (NTPS)
Configuration of all functions with STEP 7 Professional V14 (TIA Portal) or higher
Module replacement without programming device: All information can be stored on the memory card of the CPU.

Особенности

Prevention of data loss, production disruptions or machine damage by protecting against unauthorized access to the SIMATIC ET200SP Distributed Controller and lower-level networks.
Network separation for setting up identical machines with the same IP addresses
Optimum support of maintenance due to
- Simple diagnostics via the central Web server
- Monitoring with IT network management tools (SNMP)
- Module replacement without a PG
Securing the system against unauthorized access with
- Central access protection for any S7 station
- Secure access to the central Web server
Simple alerting by e-mail
Protection of investment thanks to easy integration of the SIMATIC ET 200sp Distributed Controller in existing networks with SIMATIC S7-300 / S7-400 via Industrial Ethernet using the CP 1543SP-1
Accessibility of the ET 200 SP Distributed Controller from an IPv6-based infrastructure

Технические данные

Order number		6GK7543-6WX00-0XE0
Product type designation		CP 1543SP-1
Transmission rate
Transfer rate
● at the 1st interface		10 ... 100 Mbit/s
Interfaces
Number of interfaces acc. to Industrial Ethernet		1
Number of electrical connections
● at the 1st interface acc. to Industrial Ethernet		2
Type of electrical connection
● at the 1st interface acc. to Industrial Ethernet		via ET200SP bus adaptor (RJ45, FC, LC, SCRJ), switch integrated
Supply voltage, current consumption, power loss
Type of voltage of the supply voltage		DC
Supply voltage		24 V
Supply voltage		19.2 ... 28.8 V
Power loss [W]		2.64 W
Permitted ambient conditions
Ambient temperature
● for vertical installation during operation		0 ... 50 °C
● for horizontally arranged busbars during operation		0 ... 60 °C
● during storage		-40 ... +70 °C
● during transport		-40 ... +70 °C
Relative humidity at 25 °C without condensation during operation maximum		95 %
Protection class IP		IP20
Design, dimensions and weight
Width		60 mm
Height		117 mm
Depth		74 mm
Net weight		0.18 kg
Mounting type
● 35 mm DIN rail mounting		Yes
Product properties, functions, components general
Number of units
● per CPU maximum		2
● Note		2 CPs can be pluged in per CPU, simultaneous operation with BA Send and CM DP is possible
Performance data open communication
Number of possible connections for open communication
● by means of T blocks maximum		32
Amount of data
● as user data per ISO on TCP connection for open communication by means of T blocks maximum		65 536 byte
Performance data S7 communication
Number of possible connections for S7 communication
● maximum		16
● with OP connections maximum		16
Performance data multi-protocol mode
Number of active connections with multi-protocol mode		32
Product function MIB support		Yes
Protocol is supported
● SNMP v1		Yes
● SNMP v3		Yes
● DCP		Yes
● LLDP		Yes
Configuration software
● required		STEP 7 Professional V14 (TIA Portal) or higher
Identification & maintenance function
● I&M0 - device-specific information		Yes
● I&M1 – higher-level designation/location designation		Yes
Product functions Diagnosis
Product function Web-based diagnostics		Yes; yes, via ET 200SP CPU
Product functions Security
Firewall version		stateful inspection
Product function with VPN connection		IPSec
Type of encryption algorithms with VPN connection		AES-256, AES-192, AES-128, 3DES-168, DES-56
Type of authentication procedure with VPN connection		Preshared key (PSK), X.509v3 certificates
Type of hashing algorithms with VPN connection		MD5, SHA-1
Number of possible connections with VPN connection		4
Product function
● switch-off of non-required services		Yes
● Blocking of communication via physical ports		Yes
● log file for unauthorized access		Yes
Product functions Time
Product function SICLOCK support		Yes
Product function pass on time synchronization		No
Protocol is supported
● NTP		Yes
● NTP (secure)		Yes
time synchronization
● from NTP-server		Yes

Дальнейшая информация

You will find more information on ET 200SP at http://www.siemens.com/simatic-et200sp

The TIA Selection Tool is available to assist you in selecting ET 200SP equipment and configuring modular variants:

Online version: https://www.siemens.com/tstcloud
Offline version: https://mall.industry.siemens.com/spicecad/api/CS/thirdParty/tia-selection-tool/download/tia-selection-tool.zip

You will find more information on the topic of Industrial Security on the Internet at:
http://www.siemens.com/industrialsecurity

An ET 200SP Distributed Controller firmware version ≥ 2.0 is required for operation of the CP 1543SP-1.