42922061 WinCC Communication for Wide Distances En

Applications & Tools

Answers for industry.

Cover

Communication over long Distances with WinCC

WinCC

Application Description July 2011

2 Remote Control with WinCC

Version V1.0, Entry ID: 42922061

Co

pyr

igh

t S

iem

en

s A

G C

op

yrig

ht-

Jah

r A

ll rig

hts

re

serv

ed

Industry Automation and Drives Technologies Service & Support Portal

This article is taken from the Service Portal of Siemens AG, Industry Automation and Drives Technologies. The following link takes you directly to the download page of this document.

http://support.automation.siemens.com/WW/view/en/42922061

If you have any questions about this document, please contact us at the following e-mail address:

[email protected]

http://support.automation.siemens.com/WW/view/en/42922061�

mailto:[email protected]�

Remote Control with WinCC Version 1.0 , Entry ID: 42922061 3

Co

pyr

igh

t S

iem

en

s A

G C

op

yrig

ht-

Jah

r A

ll rig

hts

re

serv

ed

s

The "Table of contents for the manual" is added here.

SIMATIC Communication over long Distances with WinCC

Comparison of the possible solutions

Automation Task

1 Overview of the Automation Solution

2

Automation Solutions in Detail

3

History

4

Warranty and Liability



Co

pyr

igh

t S

iem

en

s A

G C

op

yrig

ht-

Jah

r A

ll rig

hts

re

serv

ed

Warranty and Liability Note The application examples are not binding and do not claim to be complete

regarding configuration, equipment and any eventuality. The application examples do not represent customer-specific solutions. They are only intended to provide support for typical applications. You are responsible for ensuring that the described products are used correctly. These application examples do not relieve you of the responsibility to use sound practices in application, installation, operation and maintenance. When using these Application Examples, you recognize that we cannot be made liable for any damage/claims beyond the liability clause described. We reserve the right to make changes to these application examples at any time without prior notice. If there are any deviations between the recommendations provided in this application example and other Siemens publications – e.g. Catalogs – the contents of the other documents have priority.

We accept no liability for information contained in this document.

Any claims against us – based on whatever legal reason – resulting from the use of the examples, information, programs, engineering and performance data etc., described in this Application Example shall be excluded. Such an exclusion shall not apply in the case of mandatory liability, e.g. under the German Product Liability Act (“Produkthaftungsgesetz”), in case of intent, gross negligence, or injury of life, body or health, guarantee for the quality of a product, fraudulent concealment of a deficiency or breach of a condition which goes to the root of the contract (“gwesentliche Vertragspflichten”). The damages for a breach of a substantial contractual obligation are, however, limited to the foreseeable damage, typical for the type of contract, except in the event of intent or gross negligence or injury to life, body or health. The above provisions do not imply a change in the burden of proof to your detriment.

It is not permissible to transfer or copy these Application Examples or excerpts thereof without express authorization from Siemens Industry Sector.

Table of Contents


Co

pyr

igh

t S

iem

en

s A

G C

op

yrig

ht-

Jah

r A

ll rig

hts

re

serv

ed

Table of Contents Warranty and Liability ................................................................................................. 4 1 Automation Task................................................................................................ 6

1.1 Overview .............................................................................................. 6 2 Overview of the Automation Solution ............................................................. 7

2.1 Differences to the SIMATIC TELECONTROL product for WinCC....... 7 2.2 Urgent requirements for the individual solutions.................................. 7 2.3 Advantages of the individual solutions ................................................. 7 2.4 Advantages of the individual solutions ................................................. 8 2.5 Typical fields of application .................................................................. 9

3 Automation Solutions in Detail ...................................................................... 10 3.1 Automation solution: Dedicated line................................................... 10 3.1.1 Overview of the general solution........................................................ 10 3.1.2 Description of the core functionality ................................................... 11 3.1.3 Used hardware and software components......................................... 12 3.1.4 Alternative solutions ........................................................................... 12 3.1.5 Basic information................................................................................ 13 3.1.6 Startup of the Application ................................................................... 13 3.1.7 Operation of the application ............................................................... 16 3.1.8 Links & Literature ............................................................................... 17 3.2 Automation solution: GPRS ............................................................... 18 3.2.1 Overview of the general solution........................................................ 18 3.2.2 Description of the core functionality ................................................... 19 3.2.3 Used hardware and software components......................................... 20 3.2.4 Alternative solutions ........................................................................... 21 3.2.5 Basic information................................................................................ 21 3.2.6 Startup of the Application ................................................................... 23 3.2.7 Operation of the Application............................................................... 28 3.2.8 Links & Literature ............................................................................... 29 3.3 Automation solution: Ethernet ............................................................ 30 3.3.1 Overview of the general solution........................................................ 30 3.3.2 Description of the core functionality ................................................... 31 3.3.3 Used hardware and software components......................................... 31 3.3.4 Alternative solutions ........................................................................... 32 3.3.5 Basic information................................................................................ 33 3.3.6 Starting up the Application ................................................................. 33 3.3.7 Operation of the Application............................................................... 36 3.3.8 Links & Literature ............................................................................... 37 3.4 Automation solution: EGPRS ............................................................. 38 3.4.1 Overview of the general solution........................................................ 38 3.4.2 Description of the core functionality ................................................... 40 3.4.3 Used hardware and software components......................................... 41 3.4.4 Alternative solutions ........................................................................... 42 3.4.5 Basic information................................................................................ 43 3.4.6 Startup of the Application ................................................................... 43 3.4.7 Operation of the Application............................................................... 47 3.4.8 Links & Literature ............................................................................... 48

4 History............................................................................................................... 48

1 Automation Task



Co

pyr

igh

t S

iem

en

s A

G C

op

yrig

ht-

Jah

r A

ll rig

hts

re

serv

ed

1 Automation Task

1.1 Overview

Introduction

A requirement for plants with distributed or remote stations is to integrate these stations into the control system.

Overview of the automation task

The illustration below provides an overview of the automation task.

Figure 1-1

Remote Station 1 Remote Station 2 Remote Station n

Control System

Description of the automation problem

Geographically remote stations shall be connected to a control system.

In this example various options, further described in chapter 3, shall be used as communication media for data exchange between control systems and remote stations.



Co

pyr

igh

t S

iem

en

s A

G C

op

yrig

ht-

Jah

r A

ll rig

hts

re

serv

ed


2.1 Differences to the SIMATIC TELECONTROL product for WinCC

SIMATIC TELECONTROL for WinCC V7.0 SP2 enables connecting remote stations (Remote Terminal Units = RTUs) into a WinCC-SCADA system via telecontrol protocols. SIMATIC TELECONTROL supports the following telecontrol protocols: SINAUT ST7, IEC 60870-5 101/104 and DNP 3.

The solutions described in the following application example have no data buffer as opposed to SIMATIC TELECONTROL. This may cause a data loss for all solutions described here.

2.2 Urgent requirements for the individual solutions

Dedicated line GPRS EGPRS (VPN) Ethernet

Dedicated line (2-wire copper cable) existing or rented

Sufficient GSM/GPRS reception quality

Sufficient GSM/GPRS reception quality

Ethernet cable existing or will be installed.

Transmission speed of 19.2 kBit/s sufficient for the expected data volume



The distance limitations of the Ethernet transmission or protocol apply.

2.3 Advantages of the individual solutions


Existing dedicated lines can be used

No direct connection of the head station and the substations via a dedicated cable necessary


Existing Ethernet lines can be used

Low costs for intensive usage

Low costs for minimal usage

Low costs for minimal usage

Low costs for intensive usage

Low costs when using own dedicated lines

High transmission speed (10/100 Mbit/s)

Constant transmission speed




Very high availability. High availability. High availability. Very high availability.

Transparent PROFIBUS network at all modems

The wireless infrastructure also enables mobile substations.


There is the option to connect several substations directly at a dedicated line modem.

Higher security through VPN tunnel





Co

pyr

igh

t S

iem

en

s A

G C

op

yrig

ht-

Jah

r A

ll rig

hts

re

serv

ed

2.4 Advantages of the individual solutions


Low transmission speed of 19.2 Kbit/s

Low transmission speed in OPC mode of 9.6 Kbit/s

Low transmission speed

Cable-based solution

Based on MD2 dedicated line modem

GSM/GPRS reception required

GSM/GPRS reception required

Based on SINAUT ST7 TIM modules

High costs for minimal usage

High costs for intensive usage

High costs for intensive usage

High costs for minimal usage

It is not possible to connect several substations directly to a GPRS modem.



No transparent network at all modems



Susceptibility against possible failure sources from radio transmission


Contract with mobile phone provider required for each substation.


Data encoding not at the highest technical level.

Data encoding not at the highest technical level, however, better than mere GPRS solution with VPN tunnel

A server infrastructure accessible from the internet is required (internet connection and fixed IP or dynamic DNS).





Co

pyr

igh

t S

iem

en

s A

G C

op

yrig

ht-

Jah

r A

ll rig

hts

re

serv

ed

2.5 Typical fields of application

Table 2-1

Machine or branch Function Screenshot

Waste water treatment e.g. communication to the individual sedimentation tanks

Water supply e.g. communication to the individual pump stations

Energy distribution e.g. communication to the individual distribution stations

Oil / gas pipeline e.g. communication to the individual maintenance / pump stations

Offshore plants e.g. communication to the individual wind turbines

3 Automation Solutions in Detail



Co

pyr

igh

t S

iem

en

s A

G C

op

yrig

ht-

Jah

r A

ll rig

hts

re

serv

ed


3.1 Automation solution: Dedicated line

3.1.1 Overview of the general solution

Schematic layout

The following figure displays the most important components of the solution:

Figure 3-1

Head-end station

The head-end or central station consists of one (or several) WinCC PCs. The process connection is handled via PROFIBUS. The PROFIBUS network is connected to the dedicated line via the MD2 dedicated line modem via RJ12 cable (provided for the dedicated line modem). An LTOP is installed as over-voltage protection between the RJ12 cable and the dedicated line (transformer and overvoltage protection).

Substations

The MD2 modem and LTOP are connected with the dedicated line. One or several substations are connected to the MD2 modem.

If a MD2 modem is used as tapping point (see station 1), a second LTOP (LTOP2) must be used. (The dedicated line is “looped through” here.)



Co

pyr

igh

t S

iem

en

s A

G C

op

yrig

ht-

Jah

r A

ll rig

hts

re

serv

ed

Characteristics of the solution

Table 3-1

Characteristic Description

Transmission medium Private dedicated line / 2-wire copper cable

S7 communication PROFIBUS/MPI

WinCC communication

Possible substations S7-200, S7-300, S7-400, IM151-7

Max. possible distance see table in “Dedicated-line modem MD2 operating instruction” manual (Chapter “2.2.6 Maximal reach (in km)”)

Max. possible number of substations Limited by the number of PROFIBUS addresses

Security (information) low

Availability high

Advantages / disadvantages

Table 3-2

Advantages Disadvantages

Existing dedicated lines can be used Low transmission speed of 19.2 Kbit/s

Low costs for intensive usage Based on MD2 dedicated line modem

Low costs when using own dedicated lines High costs for minimal usage


Very high availability.

Transparent PROFIBUS network at all modems

There is the option to connect several substations directly at a dedicated line modem.

3.1.2 Description of the core functionality

Hardware and communication

- The communication is transparent, i.e. at all modems it is possible to connect PROFIBUS nodes to the PROFIBUS. Furthermore there is the option to connect several nodes, such as CPUs or PROFIBUS slaves to each modem.

- PROFIBUS network on RS485 basis, i.e. the dedicated-line modem modulates the signals and transfers them to the dedicated line via LTOP.

- There is the option to use the LTOP as tapping point. In this situation, the LTOP2 must be used instead of the LTOP1.

- The dedicated line modem MD2 can also be used as repeater.






Co

pyr

igh

t S

iem

en

s A

G C

op

yrig

ht-

Jah

r A

ll rig

hts

re

serv

ed

Example project

This application example shows the advantages and disadvantages as well as the requirements existing for the communication between WinCC and a CPU through PROFIBUS extension via dedicated line. This means that the WinCC project has the task of testing (and ensuring) the communication.

3.1.3 Used hardware and software components

The application document was generated using the following components:

Hardware components

Table 3-3

Component No. MLFB/order number Note

SIMATIC S7-300, PS 307 5A 3 6ES7307-1EA00-0AA0

SIMATIC S7-300, CPU 315-2DP

3 6ES7315-2AG10-0AB0

SINAUT ST7, MD2 DEDICATED LINE MODEM

3 6NH7810-0AA20

COMMUNICATION PROCESSOR CP 5613

1 6GK1561-3AA00

Industrial PC for WinCC 1 Industrial PC

Standard software components

Table 3-4


STEP 7 V5.4 SP5 1 6ES7 810-4CC08-0YA5

WinCC V7.0 SP1 1 6AV6 381-2BM07-0AX0 (128 power tags)

Version depends on the subsequent configuration. 128 tags are sufficient for the demo project.

Example files and projects

The following list includes all files and projects used in this example.

Table 3-5

Component Note

Remote_S.zip <This zip file contains the STEP 7 and WinCC project.>

WinCC_Remote_Control_en.pdf This document.

3.1.4 Alternative solutions

Micro Automation: Remote control and remote monitoring via dedicated line modem

In this application example the automation task was realized with WinCC flexible and S7-200 stations.

http://www.automation.siemens.com/mcms/automation/en/industrie-pc-computer/Seiten/Default.aspx�




Co

pyr

igh

t S

iem

en

s A

G C

op

yrig

ht-

Jah

r A

ll rig

hts

re

serv

ed

3.1.5 Basic information

Dedicated line

A dedicated line is a permanent connection between two communication partners via a telecommunication network or an existing line. This connection must be provided by the respective provider and, as opposed to a dial-up connection, it is always available. It can therefore not be established by one a node in dialup mode.

MD2 dedicated line modem

The MD2 dedicated line modem is a tapping-capable FSK dedicated line modem for half-duplex data transmission via 2-wire or duplex data transmission via 4-wire multipoint dedicated lines. Furthermore, the MD2 can be used as repeater on 2-wire and 4-wire dedicated lines.

The MD2 dedicated line modem is supplied with 24V.

In this application example, the MD2 dedicated line modem is used as interface between dedicated line and PROFIBUS.

Further information on the MD2 dedicated line modem is available in the entry 17163799.

Line transformer with overvoltage protection (LTOP)

Automation islands are increasingly networked, whereby this networking is currently largely realized on private telephone lines via modems. Metallic lines, however, are highly susceptible to electromagnetic interference. The coupling of extraneous voltages can be inductive or capacitive, for example due to the effects of lightning. Direct conductive coupling is also possible due to bad insulation.

The LTOP limits external voltage and overvoltage to a non-critical level. The floating transformer additionally provides electrical isolation, and the transfer of voltages to other cable sections is therefore prevented.

LTOP protects people and investments, and is therefore an essential safety element in private trunk line networks.

Further information on the LTOP is available in the entry 19993350.

In this manual the difference between LTOP1 and LTOP2 is described in detail.

3.1.6 Startup of the Application

Preparation

Table 3-6

No. Action

1 Install the hardware according to the figure in chapter 3.1.1 Overview of the overall solution.

2 Extract the project data (Remote_S.zip) to your computer and adjust the PROFIBUS addresses if necessary.






Co

pyr

igh

t S

iem

en

s A

G C

op

yrig

ht-

Jah

r A

ll rig

hts

re

serv

ed

No. Action

3 Configure the MD2 dedicated line modem and the LTOPs using the DIP switch following the instruction below:

Parameters for the MD2 dedicated line modem

It is required to parameterize the following switch positions for MD2.

Top of the modem (SW1)

SW1

Switch 1 2 3 4 5

ON/OFF 0 1 0 1 1

Top of the modem (SW1)

SW2

Switch 1 2 3 4 5 6 7 8 9 10

ON/OFF 0 0 1 1 0 0 0 0 0 0

Bottom of the modem (SW3)

SW3 to end position (beginning/end) SW3 to tapping point (center)

Switch 1 2 3 4 1 2 3 4

ON/OFF 0 1 0 1 0 1 0 0

Bottom of the modem (SW4)

Switch 1 2 3 4

ON/OFF 0 0 0 0

SW1

SW2



Co

pyr

igh

t S

iem

en

s A

G C

op

yrig

ht-

Jah

r A

ll rig

hts

re

serv

ed

No. Action

Parameterization of LTOPs (DIP switch)

The LTOPs are equipped with DIP switches 1 and 2 for parameterization. Set the switch as described in the following table

Location Switch left Switch right

Beginning, LTOP1 Position 1 -

Tapping point, LTOP2

Position 1 Position 2

End LTOP1 Position 1 -

Note The following figure illustrates the states of the DIP switches.

• Switch 1 has the state “1”

• Switch 2 has the state “0”

1 2

SW3

SW4




Co

pyr

igh

t S

iem

en

s A

G C

op

yrig

ht-

Jah

r A

ll rig

hts

re

serv

ed

Commissioning

Table 3-7

No. Action Note

1 Adapt the WinCC computer name in the OS project.

2 Compile and download the CPUs.

3 Compile and load the OS.

4 Set the communication parameters in your WinCC project according to the conditions.

3.1.7 Operation of the application

Figure 3-2

“Start picture” button

Pressing this button displays an overview of the structure of the application example.

“Overview” button

Pressing this button displays the picture represented in Figure 5-1. It contains an overview of the stations existing in the application example. Here you can change the value randomly by moving the “slide control”. The buttons “+” and “-”also give you the option to change the values. An “OnlineTrendControl” as well as a “GaugeControl” are used to display the values.



Co

pyr

igh

t S

iem

en

s A

G C

op

yrig

ht-

Jah

r A

ll rig

hts

re

serv

ed

“Station_1”, “Station_2_1” and “Station_2_2” button

Pressing this button gives you the option to individually operate the stations, as described for the “Overview” button.

“Support” button

Pressing this button opens the “Industry Automation and Drive Technologies Service & Support” page in the “WebbrowserControl”.

“Stop WinCC RT” button

Pressing this button terminates WinCC Runtime.

3.1.8 Links & Literature

Internet links

The following list is by no means complete and only provides a selection of appropriate sources.

Table 3-8

Topic Title

\1\ PROFIBUS DP Communication with SINAUT Modem MD2


\2\ ST7 manual Line transformer with overvoltage protection (LTOP)


\3\ Manual Dedicated Line Modem MD2 – Operating Instructions








Co

pyr

igh

t S

iem

en

s A

G C

op

yrig

ht-

Jah

r A

ll rig

hts

re

serv

ed

3.2 Automation solution: GPRS


Schematic layout


Figure 3-3

Head-end station

The head-end or central station consists of one (or several) WinCC PCs. Process connection from WinCC PC to the controller occurs via the Ethernet interface of the PC. Via Ethernet cable the interface is connected with the router which communicates with the GPRS modem (MD720-3) via the internet and GSM/GPRS. Furthermore, the SIMATIC Software SINAUT MICRO SC (OPC Routing Software with special communication functions) is installed on the WinCC PC. This software is responsible for the communication with the controllers.

Substations

The MD720-3 Modem generates the connection of the substation to the provider. The communication from modem to communication module CM 1241 RS232 is created via the serial interface using a RS232C cable. This communication module is then directly connected with the CPU (S7-1200).


Table 3-9


Transmission medium Internet or GSM/GPRS

S7 communication RS232

WinCC communication TCP/IP (GPRS)

Possible substations S7-1200, S7-200, S7-300, S7-400, IM151-7

Max. possible distance No distance restriction since a GSM/GPRS network exists virtually everywhere



Co

pyr

igh

t S

iem

en

s A

G C

op

yrig

ht-

Jah

r A

ll rig

hts

re

serv

ed


Max. possible number of substations The maximal possible number of connections is limited by the available system resources and their performance data, especially CPU, RAM, Ethernet connection.


Availability high


Table 3-10



Low transmission speed in OPC mode of 9.6 Kbit/s

Low costs for minimal usage GSM/GPRS reception required

Constant transmission speed High costs for intensive usage

High availability. It is not possible to connect several substations directly to a GPRS modem.





Data encoding not at the highest technical level.




- The communication via the MD720-3 modem can occur in connection with the quad band antennae ANT 794-4MR via all four band widths of the GSM network and can hence be employed world-wide.

- The communication between CPU and modem occurs via the CM1241 communication module, which has a serial interface and is connected with the modem via RS232C cable.

Example project

This application example shows the advantages and disadvantages as well as the requirements existing for the communication between WinCC and a CPU via GSM/GPRS. This means that the WinCC project only has the task of testing (and ensuring) the communication.




Co

pyr

igh

t S

iem

en

s A

G C

op

yrig

ht-

Jah

r A

ll rig

hts

re

serv

ed



Hardware components

Table 3-11

Component No. MLFB/order number

Note

SIMATIC S7-1200, PM1207 2 6EP1332-1SH71

SIMATIC S7-1200, CM 1241 RS232

2 6ES7241-1AH30-0XB0

SIMATIC S7-1200, CPU 1214C

2 6ES7214-1AE30-0XB0

GPRS/GSM modem SINAUT MD720-3

2 6NH9720-3AA00

Quad band GSM antenna SINAUT 794-4MR

2 6NH9860-1AA00

Industrial PC for WinCC and SINAUT MICRO SC

1 Industrial PC

Industrial PC for Step 7 1 Industrial PC


Table 3-12


STEP 7 Basic V10.5 SP2

1 6ES7822 -0AA00-0YA0 Service Pack 2 for Step 7 Basic V10.5 is available in the following entry.



SINAUT MICRO SC 1 6NH9910-0AA10-0AA3 Version depends on the subsequent configuration. For the demo project the SINAUT MICRO SC 8 package is sufficient.



Table 3-13

Component Note

REMOTE_GPRS.zip <This zip file includes the STEP 7 Basic project.>

Remote_GPRS_WinCC.zip <This zip file contains the WinCC project.>







Co

pyr

igh

t S

iem

en

s A

G C

op

yrig

ht-

Jah

r A

ll rig

hts

re

serv

ed


Remote control and remote monitoring via GSM/GPRS

• In this application example the automation task was realized with WinCC flexible and SINAUT MICRO SC as well as a S7-300 station.

• In this application example the automation task was realized with WinCC flexible and SINAUT MICRO SC as well as a S7-1200 station.


GSM/GPRS

GPRS (General Packet Radio Service) or is the service for data transmission in the GSM network (Global System for Mobile Communications). The advantage of a GPRS – connection is that the radio space is only occupied during a data transmission which only generates costs if this is the case.

GPRS modem MD720-3

The GPRS modem SINAUT MD720-3 transmits data between S7 devices and an OPC server SINAUT MICRO SC over radio through a GSM network via GPRS. The GPRS modem is here configured by a program block of the connected CPU and automatically establishes the connection between the CPU and the OPC server.

The GPRS modem is supplied with 24V.

In this application example the GPRS modem MD720-3 is employed as interface between CPU and OPC server / WinCC station.

Further information on GPRS modem SINAUT MD720-3 is available in the entry 23117745.

Port forwarding

Port forwarding is the forwarding of a connection with arrives at a certain port of a switch / router and is then forwarded to a certain computer in the network. This means the data are not sent to all computers.







Co

pyr

igh

t S

iem

en

s A

G C

op

yrig

ht-

Jah

r A

ll rig

hts

re

serv

ed

Monitoring the registration process of GPRS modem MD720-3 using the LEDs

Table 3-14

No. Action Note

1. After activation of the voltage supply, the LEDs S and C start blinking at one- or two-second intervals.

1s 2s

S Q C

2. If the initialization was triggered, the modem will check the parameters.

1s

S Q C

3. The modem tries to establish a GSM connection.

1s

S Q C

4. The modem successfully logs into the provider’s GSM network

S Q C

5. The modem has successfully established the GPRS connection.

S Q C

6. The modem attempts to login to the Central Station.

1s

S Q C

7. The modem has successfully logged in to the Central Station.

S Q C



Co

pyr

igh

t S

iem

en

s A

G C

op

yrig

ht-

Jah

r A

ll rig

hts

re

serv

ed


Preparation

Table 3-15

No. Action


2 Extract the project data (REMOTE_GPRS.zip) to the computer with STEP 7 Basic V10.5 and adjust the IP addresses of your CPUs.

3 Extract the project data (Remote_GPRS_WinCC.zip) to the computer with WinCC and configure the OPC server of the SINAUT MICRO SC as described in table 3-16.

Configuration of the SINAUT MICRO SC server

Table 3-16

No. Action Note

1 Open the configuration user interface of the server.

Start -> Simatic -> SINAUT MICRO SC -> Configuration

2 Press the “Add” button to add a new station

3 The Properties window opens. Here you enter Station name, Station number as well as Login data for the modem. Confirm your configuration with “OK”.




Co

pyr

igh

t S

iem

en

s A

G C

op

yrig

ht-

Jah

r A

ll rig

hts

re

serv

ed

No. Action Note

4 Repeat steps 2 and 3 for the other station.

5 Determine a server port at Extras -> Settings Note: In this screenshot the standard port is used, however, any other port may also be used.

Commissioning

Table 3-17

No. Action Note

1 Open the STEP 7 Basic project (REMOTE_GPRS) and configure the “com_DB” blocks of each station in the “OB1” of the project with your initialization parameters. A description of the inputs and outputs is available in Table 3-14. The GPRS modem MD720-3 uses these initialization parameters to establish the connection with the provider, after a positive edge is pending at input “cmd_init_start”.

2 Compile and download both stations.


4 Adapt the WinCC computer name in the OS project and start the WinCC Runtime.

5 Initialize the modem via the value of the ““com_DB”.cmd_init_start” block in the “chart_cmd-return” monitoring table. In this monitoring table further values can be monitored to see whether the initialization runs through without errors. Both return values are explained, for example, in Table 3-18 at point 14 and 15.



Co

pyr

igh

t S

iem

en

s A

G C

op

yrig

ht-

Jah

r A

ll rig

hts

re

serv

ed

No. Action Note

6 After the initialization, the modem establishes the connection to the router via the provider. The data is then forwarded directly to the IP address set at your central station via the Port forwarding set at the router. This means that all data arriving at port “26862” (set in Table 3-16 step 5) are forwarded to the IP address set at the central station. This rule for the port forwarding must also be defined at the router.

Description of the inputs and outputs of the “com_DB” block

Table 3-18

No. Designation Transfer Data type Description/note

1. cmd_init_start IN Bool • Enables the initialization process

• Responds to a positive edge

• The start command is stored as long as the “com” function block is already processed. The block always saves only one start command provided it cannot be processed instantly.

2. cmd_init_size_of_array

IN Int • Enter the size of the array in the global data block "data_DB[144]"

• Default value: 1000; no entry required, if the global data block is not modified

3. cmd_init_hw_id IN PORT • Hardware ID of the RS232 communication module

• Default value: 11; no entry required, if the RS232 CM is placed in the first slot on the left side of the S7-1200 PLC

4. cmd_init_STATION_ID

IN Int • Specific and unique station number

• Permissible values: from 1 to 256

• Corresponds to the station number allocated in the SINAUT Micro SC software

5. cmd_init_IP_ADDRESS

IN String • Static IP address of the Internet connection to the Central Station

• UorU host name, if DynDNS is used

• Permissible value: Maximum 50 characters

6. cmd_init_DEST_PORT

IN String • Port number used for routing to the Central Station

• Corresponds to the port number allocated in the SINAUT Micro SC software


7. cmd_MODEM_NAME

IN String • Modem name for authentication

• Corresponds to the modem name used in the SINAUT Micro SC software


8. cmd_MODEM_PW

IN String • Modem password for authentication

• Corresponds to the modem password used in the SINAUT Micro SC software





Co

pyr

igh

t S

iem

en

s A

G C

op

yrig

ht-

Jah

r A

ll rig

hts

re

serv

ed

No. Designation Transfer Data type Description/note

9. cmd_init_SIM_PIN

IN String • PIN number of the SIM card inserted in the modem

• If the PIN number is disabled, “0000” has to be entered

10. cmd_init_APN IN String • GPRS access point address of the relevant provider

• Allocated by the provider


• List: HUhttp://www.unlocks.co.uk/gprs_settings.phpU

H

11. cmd_init_APN_USER

IN String • User name for login to GPRS, allocated by the provider


12. cmd_init_APN_PW

IN String • User password for login to GPRS, allocated by the provider


13. cmd_init_DNS IN String • DNS name server of the provider in the form of IP addresses

• Up to two IP addresses, separated by a semicolon

• Only relevant in combination with a host address instead of a static IP address

• Example: IP1;IP2

14. return_init_ok OUT Bool • Gives feedback, if modem initialization has been successfully completed.

• This does UnotU imply, that the PLC is also logged in to SINAUT Micro SC

• After this output has been set, it takes at least 20 seconds until the station will be logged in to SINAUT Micro SC

• Stays TRUE until initialization is triggered again

• Default value: FALSE

15. return_init_aborted

OUT Bool • Gives feedback when initialization of modem terminated incorrectly

• Stays TRUE until initialization is triggered again

• Default value: TRUE

Note When selecting the APN address, please note that the provider makes a distinction between APN access points for WAP and for the "real" Internet. WAP access point will not function with this system.

Note With the solution based on this S7-1200 PLC, a teleservicing function cannot be realized. For this reason, the parameter "CLIP", as known from the GPRS solution based on the S7-200 unit, has been omitted.

http://www.unlocks.co.uk/gprs_settings.php�





Co

pyr

igh

t S

iem

en

s A

G C

op

yrig

ht-

Jah

r A

ll rig

hts

re

serv

ed

Monitoring the SINAUT MICRO SC server

Apart from the configuration screens, the SINAUT MICRO SC user interface also offers dialogs for status monitoring.

Table 3-19

No. Action Note

1 You receive an overview of the status of all configured remote stations via the “Status Matrix” button.

2 Select a configured station and click the “Test Status” button. The small Status window displays the current connection status. The connections between ServerModem and Server PLC are viewed separately.




Co

pyr

igh

t S

iem

en

s A

G C

op

yrig

ht-

Jah

r A

ll rig

hts

re

serv

ed

3.2.7 Operation of the Application

Figure 3-4





“Station_1” and “Station_2” button




Co

pyr

igh

t S

iem

en

s A

G C

op

yrig

ht-

Jah

r A

ll rig

hts

re

serv

ed






Internet links


Table 3-20

Topic Title

\1\ System Manual GPRS/GSM Modem SINAUT MD720-3


\2\ SIMATIC S7-1200 Easy Book


\3\ Manual Quad band GSM antenna SINAUT 794-4MR


\4\ SINAUT MICRO SC System Manual


\5\ Application: Wireless Communication via GPRS with S7-1200 controllers


\6\ Application: Wireless data communication based on GPRS between S7-300 stations and SINAUT Micro SC Server











Co

pyr

igh

t S

iem

en

s A

G C

op

yrig

ht-

Jah

r A

ll rig

hts

re

serv

ed

3.3 Automation solution: Ethernet


Schematic layout


Figure 3-5

Head-end station

The head-end or central station consists of one (or several) WinCC PCs. Process connection from WinCC PC to the controller occurs via the Ethernet interface of the PC. It is connected with a SINAUT ST7 TIM4R IE module via Ethernet cable which acts as router to the TIM modules of the substations.

Substations

Each substation (CPU) is connected with a SINAUT ST7 TIM3V IE module via the backplane bus which communicates with the SINAUT ST7 TIM4R IE module via a SCALANCE switch. The communication in this automation solution takes place via SINAUT ST7.


Table 3-21


Transmission medium Ethernet cable

S7 communication SINAUT ST7

WinCC communication TCP/IP (Ethernet)


Max. possible distance This detail depends on the used Ethernet standard



Co

pyr

igh

t S

iem

en

s A

G C

op

yrig

ht-

Jah

r A

ll rig

hts

re

serv

ed


Max. possible number of substations Limited by the number of possible Ethernet addresses


Availability high


Table 3-22


Existing Ethernet lines can be used Cable-based solution

Low costs for intensive usage Based on SINAUT ST7 TIM modules

High transmission speed (10/100 Mbit/s) High costs for minimal usage

Constant transmission speed It is not possible to connect several substations directly to a GPRS modem.

Very high availability. No transparent network at all modems



- The communication between the central station and SINAUT ST7 TIM 4R-IE takes place via a standard Ethernet cable.

- The communication between the CPU and SINAUT ST7 TIM 4R-IE takes place via a standard Ethernet cable connected to a SINAUT ST7 TIM 3V-IE. This module is connected to the CPU via a backplane bus.

Example project

This application example shows the advantages and disadvantages as well as the requirements existing for the communication between WinCC and a CPU via an Ethernet cable. This means that the WinCC project only has the task of testing (and ensuring) the communication.



Hardware components

Table 3-23

Component No. MLFB/order number

Note



2 6ES7315-2AG10-0AB0

SCALANCE X208 1 6GK5208-0BA10-2AA3

SINAUT ST7, TIM 4R-IE 1 6NH7800-4BA00

SINAUT ST7, TIM 3V-IE 2 6NH7800-3BA00

Industrial PC 1 Industrial PC





Co

pyr

igh

t S

iem

en

s A

G C

op

yrig

ht-

Jah

r A

ll rig

hts

re

serv

ed


Table 3-24


STEP 7 V5.4 SP5 1 6ES7 810-4CC08-0YA5



SINAUT ST7 Software package 2009

1 6NH7997-0CA50-0AA0 SINAUT ST7 - ProTool V5.0 SP1 as well as SINAUT ST7 - TD7 Library Basic01 V2.2 SP1 were used

SINAUT ST7cc V2.7 SP1

1 6NH7997-7CA15-0AA1 This MLFB is for usage of maximal 6 SINAUT stations



Table 3-25

Component Note

Remote_Ethernet.zip <This zip file includes the STEP 7 project.>

Remote_Ethernet_WinCC.zip <This zip file contains the WinCC project.>

REMOTE_Ecc_Ethernet.zip <This zip file contains the ST7cc project.>



Remote control and remote monitoring via Ethernet

• In this application example the automation task was realized with WinCC and SINAUT ST7 (ST7cc) as well as a S7-300 station.




Co

pyr

igh

t S

iem

en

s A

G C

op

yrig

ht-

Jah

r A

ll rig

hts

re

serv

ed


SINAUT ST7 TIM 4R-IE

In this case, SINAUT ST7 TIM 4R-IE is used in stand-alone-mode as communication processor for the control center PC. The module enables interconnecting two different networks. The TIM module separates these tow networks. Only SINAUT and PG communication with the stations is allowed to pass, which prevents unnecessary network traffic.

Further information on SINAUT ST7 TIM 4R-IE is available in the entry 25695481.

SINAUT ST7 TIM 3V-IE

In this case, SINAUT ST7 TIM 3V-IE is used as communication module of the CPU. The CPU is connected with the TIM module via the backplane bus and is therefore connected to the Ethernet network.


3.3.6 Starting up the Application

Preparation

Table 2-36

No. Action


2 Extract the Step 7 project data (Remote_Ethernet.zip) to your computer.

3 Extract the EinCC project data (Remote_Ethernet_WinCC.zip) to your computer.

4 Extract the ST7cc project data (Remote_Ecc.zip) to your computer.

Commissioning

Table 3-27

No. Action Note

1 Open the WinCC project (Remote_Ethernet_WinCC) and adjust the WinCC computer name accordingly.


3 Open the STEP 7 project (REMOTE_Ethernet) and adjust the IP addresses of the CPUs, the OS and the TIM modules.






Co

pyr

igh

t S

iem

en

s A

G C

op

yrig

ht-

Jah

r A

ll rig

hts

re

serv

ed

No. Action Note

4 Open the dialog for the configuration of ST7cc via “Start > SIMATIC > ST7cc > ST7cc Config”.

5 Select the ST7cc project (st7_project in the REMOTE_Ecc folder) via the “Open” dialog.



Co

pyr

igh

t S

iem

en

s A

G C

op

yrig

ht-

Jah

r A

ll rig

hts

re

serv

ed

No. Action Note

6 Open the project settings via “Edit > Project Settings” and go to the “Communication” tab; there you set the communication partner and acknowledge the dialog with “OK”.

7 Save the changes via “File > Save” and acknowledge the dialog with “Save”, then close the “ST7cc Config” dialog.

8 Compile and download all stations, TIM modules and the WinCC station.

9 Now start the WinCC project.




Co

pyr

igh

t S

iem

en

s A

G C

op

yrig

ht-

Jah

r A

ll rig

hts

re

serv

ed


Figure 3-6





“Station_1” and “Station_2” button








Co

pyr

igh

t S

iem

en

s A

G C

op

yrig

ht-

Jah

r A

ll rig

hts

re

serv

ed


Internet links


Table 3-30

Topic Title

\1\ Sales and Delivery Release SINAUT ST7 Communication Module TIM 4R-IE


\2\ SINAUT ST7 System Manual


\3\ Application: SINAUT ST7 Telecontrol with TIM4R-IE and TIM3V-IE in an Ethernet-based environment








Co

pyr

igh

t S

iem

en

s A

G C

op

yrig

ht-

Jah

r A

ll rig

hts

re

serv

ed

3.4 Automation solution: EGPRS


Schematic layout


Figure 3-7

Table 3-3

IP Address Module

Internal External

TIM 3V-IE -- Station 2

MD741-1 -- Dynamic from APN

TIM 3V-IE 140.70.0.2 Station 3

MD741-1 140.70.0.1 Dynamic from APN

DSL router 172.16.0.1 Fixed IP from provider

SCALANCE S612 172.17.3.1 172.16.37.135

TIM 4R-IE 172.18.4.1 172.17.3.2

Control center

PC/ PG 172.18.4.2



Co

pyr

igh

t S

iem

en

s A

G C

op

yrig

ht-

Jah

r A

ll rig

hts

re

serv

ed

Head-end station

The head-end or central station consists of one (or several) WinCC PCs. Process connection from WinCC PC to the controller occurs via the Ethernet interface of the PC. Via Ethernet cable it is connected with a SINAUT ST7 TIM4R IE module which acts as router to the SCALANCE S612.

Substations

Each substation (CPU) is connected with a SINAUT ST7 TIM3V IE module via the backplane bus. This SINAUT ST7 TIM3V IE communicates with a SCALANCE S612 via a SINAUT MD741-1 modem (EGPRS).


Table 3-21


Transmission medium GPRS (Industrial Ethernet cable)

S7 communication SINAUT ST7

WinCC communication TCP/IP (GPRS)


Max. possible distance This detail depends on the used Ethernet standard. Transmission via GPRS does not depend on the distance.

Max. possible number of substations Limited by the number of possible Ethernet addresses


Availability high




Co

pyr

igh

t S

iem

en

s A

G C

op

yrig

ht-

Jah

r A

ll rig

hts

re

serv

ed


Table 3-22



Low transmission speed

Low costs for minimal usage GSM/GPRS reception required

Constant transmission speed High costs for intensive usage

High availability. It is not possible to connect several substations directly to a GPRS modem.



Higher security through VPN tunnel Susceptibility against possible failure sources from radio transmission


Data encoding not at the highest technical level, however, better than mere GPRS solution with VPN tunnel





- The communication between the central station and SINAUT ST7 TIM 4R-IE takes place via a standard Ethernet cable.

- The communication between the CPU and SINAUT ST7 TIM 4R-IE takes place via GPRS.

- SINAUT ST7 TIM 3V-IE is connected to the CPU via the backplane bus. A SINAUT MD741-1 modem has been connected to the SINAUT ST7 TIM 3V-IE which establishes a VPN tunnel to the SCALANCE S612.

Example project

This application example shows the advantages and disadvantages as well as the requirements existing for the communication between WinCC and a CPU via EGPRS (VPN tunnel). This means that the WinCC project only has the task of testing (and ensuring) the communication.



Co

pyr

igh

t S

iem

en

s A

G C

op

yrig

ht-

Jah

r A

ll rig

hts

re

serv

ed



Hardware components

Table 3-23




1 6ES7315-2AG10-0AB0

SCALANCE S612 1 6GK5612-0BA00-2AA3

SINAUT ST7, TIM 4R-IE 1 6NH7800-4BA00

SINAUT ST7, TIM 3V-IE 1 6NH7800-3BA00

SINAUT MD741-1 1 6NH9741-1AA00

Quad band GSM antenna SINAUT 794-4MR

1 6NH9860-1AA00

Industrial PC 1 Industrial PC

DSL Router 1


Table 3-24


STEP 7 V5.4 SP5 1 6ES7 810-4CC08-0YA5



SINAUT ST7 Software package 2009

1 6NH7997-0CA50-0AA0 SINAUT ST7 - ProTool V5.0 SP1 as well as SINAUT ST7 - TD7 Library Basic01 V2.2 SP1 were used

SINAUT ST7cc V2.7 SP1

1 6NH7997-7CA15-0AA1 This MLFB is for usage of maximal 6 SINAUT stations

Security Configuration Tool V02.02

1 Included in the delivery scope of SCALANCE S612





Co

pyr

igh

t S

iem

en

s A

G C

op

yrig

ht-

Jah

r A

ll rig

hts

re

serv

ed



Table 3-25

Component Note

Remote_EGPRS.zip This zip file contains the STEP 7 project.

WinCC_EGPRS_Remote.zip This zip file contains the WinCC project and the ST7cc project.

Sec Tool.zip This zip file contains the Security Configuration Tool project. (Configuration of SCALANCE S612)

MD741-1_Konfig.zip This zip file contains the configuration file for the MD741-1 modem.



Remote control and remote monitoring via Ethernet

• In this application example the automation task was realized with WinCC and SINAUT ST7 (ST7cc) as well as a S7-300 station.




Co

pyr

igh

t S

iem

en

s A

G C

op

yrig

ht-

Jah

r A

ll rig

hts

re

serv

ed


SINAUT ST7 TIM 4R-IE

In this example the SINAUT ST7 TIM 4R-IE is used in stand-alone-mode as communication module for the control center PC. Two different networks are connected to the SINAUT ST7 TIM 4R-IE and interconnected to each other. Via the SINAUT ST7 TIM 4R-IE only the SINAUT and PG communication which takes place between the connected stations can pass. This prevents unnecessary network traffic.


SINAUT ST7 TIM 3V-IE

In this example the SINAUT ST7 TIM 3V-IE is used as communication module of the CPU. The CPU is connected with the SINAUT ST7 TIM 3V IE via the backplane bus and is therefore connected to the Ethernet network.


SINAUT MD741-1

In this case, SINAUT MD741-1 is used as communication module of SINAUT ST7 TIM 3V-IE. SINAUT MD741-1 is required for the communication via GPRS.

Further information on SINAUT MD741-1 is available in the entry 31385703.


Preparation

Table 4- 36

No. Action


2 Unzip the Step 7 project (Remote_EGPRS.zip) on your computer.

3 Unzip the WinCC project (WinCC_EGPRS_Remote.zip) on your computer.

4 Unzip the configuration file for the SINAUT MD741-1 (MD741-1_Konfig.zip) on the PC.

5 Unzip the Security Configuration Tool (Sec Tool.zip) on the PC.







Co

pyr

igh

t S

iem

en

s A

G C

op

yrig

ht-

Jah

r A

ll rig

hts

re

serv

ed

Commissioning

Table 3-27

No. Action Note

1 Connect your PC/PG to the MD741-1 modem and adjust the IP address of your PC/PG so you can access the modem.

According to the factory settings the MD741-1 modem has the address 192.168.1.1.

2 Start a browser and enter the address https://[ip-adresse MD741-1].

After successful connection, a security dialog appears which you acknowledge with Yes.

3 Enter user name and password. The default settings are: User name: admin Password: sinaut

4 In the Web Based Management of the MD741-1 modem you select the menu Maintenance Configuration Profiles.

5 Click the “Browse” button and select configuration file “Remote1.tgz” from the “MD741-1_Konfig” folder. Then click the “Submit” button.

6 Click the “Activate” button to open the configuration profile.

7 Now the MD741-1 has been configured with IP address, VPN connection and the respective certificates for setting up the VPN connection. In the Web Based Management of the MD741-1 modem you select the Ethernet Network EDGE/EGPRS menu and enter the PIN of your SIM card as well as the APN (Access Point Name) of your provider according to the specifications.

Further information is available:

• in the manual of the SINAUT MD741-1 modems under the following link: http://support.automation.siemens.com/WW/view/en/31385703

• in the application “SINAUT ST7 Telecontrol configuration examples in Ethernet, secure Internet and (E)GPRS environment (Configuration 8)” under the following link: http://support.automation.siemens.com/WW/view/en/23810112

8 Connect your PC/PG to the external port of the SCALANCE S612.

The SCALANCE S has no default IP Address. Download occurs via the given MAC address







Co

pyr

igh

t S

iem

en

s A

G C

op

yrig

ht-

Jah

r A

ll rig

hts

re

serv

ed

No. Action Note

9 Select Start SIMATIC SCALANCE Security Security Configuration Tool in the menu to open the “SIMATIC Security Configuration Tool”. Then open the project (Konfiguration-1.smp) in the “Sec Tool” folder.

The user data for the security project are: User name: admin Password: VPN

10 If necessary adjust the IP address and MAC address of the SCALANCE S612 as well as the IP address of the used router and MD741-1 according to your specifications.

After you have changed the configuration of the SCALANCE S you have to reload the SCALANCE S as well as regenerate the certificates for the MD741-1 modem via the Security Configuration Tool and download them to the modem. Further information is available:

• in the manual of the SINAUT S612 under the following link: http://support.automation.siemens.com/WW/view/en/21718449

• in the application “SINAUT ST7 Telecontrol configuration examples in Ethernet, secure Internet and (E)GPRS environment (Configuration 8)” under the following link: http://support.automation.siemens.com/WW/view/en/23810112

11 Select the SCALANCE S612 and click on the “Download” button to download the configuration into the SCALANCE S612.

12 Connect your PC/PG to the SINAUT TIM4R IE.

13 Open the STEP 7 project and download the hardware configuration and the connections into the TIM4R IE.

14 Repeat steps 12 and 13 for the SINAUT ST7 TIM 3V-IE and the CPU.

15 Connect your PC/PG with the TIM4R IE according to Figure 3-7 and download the configuration of the “ST7cc” PC station into the components configurator on your PC/PG.

16 On the PC/PG in Windows you chose START SIMATIC SIMATIC NET to open the “Configuration Console”.

17 In the “Configuration Console” you set the following interface configuration for the “CP_H1_1” access point: TCP/IP Network card.

18 On your PC/PG you open the WinCC project “WinCC_EGPRS_Remote.MCP”.

19 In the WinCC Explorer you use the right mouse-button to clock on the “ST7cc Config” editor and open it via the “” menu.

17 In the “ST7cc Config” editor you open the ST7cc project in the “WinCC_EPGRS_Remote\ST7cc” folder.








Co

pyr

igh

t S

iem

en

s A

G C

op

yrig

ht-

Jah

r A

ll rig

hts

re

serv

ed

No. Action Note

18 Now open the “Global settings” of the ST7cc Config via the “F3” button or the Edit Global Settings menu.

19 In the “Global Settings” dialog you go to the “Computer” tab. Press the “Add server information to system” button.

20 In the “Global Settings” dialog you go to the “Project” tab. Click the “Activate current project for ST7cc Runtime” button.

21 Start the “ST7cc Runtime” via the menu Start SIMATIC ST7cc ST7cc Runtime.

22 In the SINAUT-LOG-Server you check whether the SINAUT ST7cc server reaches all nodes / stations successfully.

22 Check the network connections using the figure in 3.4.1 Overview of the overall solution and start the WinCC Runtime. Now you can test the connection to the CPU.



Co

pyr

igh

t S

iem

en

s A

G C

op

yrig

ht-

Jah

r A

ll rig

hts

re

serv

ed


Figure 3-8


Click the “Start picture” button to display an overview of the structure of this application example.


Click the “Overview” button. The picture displayed in Figure 3-8 is displayed. It contains an overview of the stations existing in the application example. Here you can change the value randomly by moving the “slide control”. When clicking the “+” or “-” buttons, the values also change. An “OnlineTrendControl” as well as a “GaugeControl” are used to display the values.

“Station_1” button

Pressing the “Station_1” button then gives you the option to operate the station as described for the “Overview” button.


Press the “Support” button to open the “Industry Automation and Drive Technologies Service & Support” page in the “WebbrowserControl”.


Click the “Stop WinCC” button to terminate WinCC Runtime.

4 History



Co

pyr

igh

t S

iem

en

s A

G C

op

yrig

ht-

Jah

r A

ll rig

hts

re

serv

ed


Internet links


Table 3-30

Topic Title





\3\ SINAUT ST7 System Manual


\4\ SINAUT MD741-1 System Manual


\5\ Application: SINAUT ST7 Telecontrol with TIM4R-IE and TIM3V-IE in an Ethernet-based environment


\6\ SCALANCE S and SOFTNET Security Client


4 History

Table 5-1

Version Date Revisions

V1.0 05.07.2011 First issue







Documents

42922061 WinCC Communication for Wide Distances En